Blind Baselines Beat Membership Inference Attacks for Foundation Models