Your Model is Private. Your System Isn't.