As reported in (Elazar and Goldberg, 2018;Lample et al., 2019), the style information can be still recovered from the latent representation even the model has trained adversarially.
it is not easy to disentangle the stylistic property from the semantics of a sentence.