If the blob of knowledge consists of the weights of some neural network and if this blob is public... Then an attacker could easily perform imperceptible pertur

If the blob of knowledge consists of the weights of some neural network and if this blob is public... Then an attacker could easily perform imperceptible perturbation to the input in order to make the network believe that the yogurt is an Eiffel tower or vice versa. (Can't find the related publications right now but it appeared several times on hn before). So if you don't want the system to be gameable, such public blobs of weights may need to be avoided.