I wonder how vulnerable this system is to adversarial attacks. This will depend on the details of the implementation and is probably easy to guard against (e.g.

I wonder how vulnerable this system is to adversarial attacks. This will depend on the details of the implementation and is probably easy to guard against (e.g. by using an additional, non-NN based tracker or out-of-distribution detection), but it is an interesting scenario. Would you get arrested for entering a shop with a sweater that features a (seemingly) random noise print, making the payment system malfunction?