The adversity is not only "deep" in the sense that resnet are affected, it seems to be universal and intrinsically tied to accuracy of current classifiers. For

The adversity is not only "deep" in the sense that resnet are affected, it seems to be universal and intrinsically tied to accuracy of current classifiers. For reference look for "Empirically estimating concentration of measures: Fundamental limits to robustness", "Adversarial Examples are features, not bugs" and the work on transferability by Papernot, Athalye, Madry and others