This is a highly biased article, imo. i) The authors and commenters of the article have a strong incentive to get funding for their projects. ii) The mentione

This is a highly biased article, imo. i) The authors and commenters of the article have a strong incentive to get funding for their projects. ii) The mentioned problems are mostly academic. The real-world implications are not tested, unknown, and likely overblown. Yes, one can create contrived examples. But that isn't same as real life. The way spoofing examples are created is by feeding small perturbations of the same image to a time-invariant detector. It's unclear if such attacks have much practical value. E.g. a password screen won't allow you to try more than 3-5 values. Attacks must be detectable (due to repeated tries of small perturbations). Plus noise and other perturbations can be added to the detector.