[actuallyalys]

I’m inclined to believe that it’s not a fundamental problem. But it’s unclear what kind of tradeoffs architectures that aren’t vulnerable will have, and I suspect there might be many false starts in trying to solve the problem.

Edit: To clarify, I think the problem is solvable in theory but may limit the effectiveness of these models in practice. My biggest concern is that people will gloss over these concerns and deploy vulnerable systems.