A Membership Exposure Evaluated by a Stronger Attack In this section, we evaluate the membership exposure effect with a stronger membership inference attack proposed by [