Sure, some image classifiers can be fooled by some vandalism that requires a high degree of technical sophistication, but a) Humans can be fooled by vandalisin

Sure, some image classifiers can be fooled by some vandalism that requires a high degree of technical sophistication, but a) Humans can be fooled by vandalising a stop sign too. The difference here is that the change is imperceptible to humans... but does this matter? b) A lot of self-driving work leans heavily on maps which will know to expect a stop sign.