StableDiffusion is 4GB which is approximately two bytes per training image. That's not very derivative, it's actual generalization.
"Mickey" does work as a prompt, but if they took that word out of the text encoder he'd still be there in the latent space, and it's not hard to find a way to construct him out of a few circles and a pair of red shorts.