I wonder if this would be defeated by running an image I wanted to match through it first. Would current state of the art facial recognition match the two cloa

I wonder if this would be defeated by running an image I wanted to match through it first. Would current state of the art facial recognition match the two cloaked images, or did they already consider that as an attack surface?