Can't the technique itself be used to better train the speech recognition systems? Using the first example where it sounds like "without the dataset the articl

Can't the technique itself be used to better train the speech recognition systems? Using the first example where it sounds like "without the dataset the article is useless" but the speech recognition thinks it hears "okay google browse to evil dot com"; you could use that to train the recognition system to recognize it correctly as what humans think they heard. Of course, many attacks would need to be used to create lots of training data.