While this is very cool and I hope it succeeds, I find myself worried that Malloc's dependence on ML makes it extremely vulnerable to adversarial attacks. Thou

While this is very cool and I hope it succeeds, I find myself worried that Malloc's dependence on ML makes it extremely vulnerable to adversarial attacks. Though at the same time, it's probably much harder to change software behavior than it is to modify a bunch of pixels on a photo, so it might be hard to do adversarial attacks with spyware. I wonder if there's research on stuff like this.