Interesting. But since, these adversarial images have to be tuned to the recognition engine in question, what keeps the authors of the recognition engines in qu

Interesting. But since, these adversarial images have to be tuned to the recognition engine in question, what keeps the authors of the recognition engines in question from updating their engines or models or algorithms from recognizing and disregarding such adversarial images?