The blind spot exploiting strategy you link to was found by an adverserial ML model...