Surely someone's going to figure out a way to "talk" to Alexa in a pitch that it can hear but humans cannot? But even if humans can hear the fraudulent command

Surely someone's going to figure out a way to "talk" to Alexa in a pitch that it can hear but humans cannot? But even if humans can hear the fraudulent commands, what's the defense beyond a confirmation?