LLM privacy leakage and memorization risk