[yonilevy]

Right, and great point, but aren't the adversaries targeting a specific model? Are they agnostic to setups differences?

[webmaven]

Some approaches target multiple models to come up with more general attacks. It's also worth noting that manipulations that will fool humans are starting to pop up as well.