“ShieldFont” aims to poison AI training data without making pages unreadable for people.