I wonder if it's actually subtly altered each time, possibly with some adversarial image manipulation that people can't spot...