A Cautionary Tale: On the Role of Reference Data in Empirical Privacy Defenses