So is blending an image of a dog and cat an adversarial modification of an image because the dog might be mistaken for the cat? It's just pixels. Some kind of d

So is blending an image of a dog and cat an adversarial modification of an image because the dog might be mistaken for the cat? It's just pixels. Some kind of definitional constraint on the sorts of modifications being made is prerequisite to this being actually interesting.