I wonder how deep watermarks would perform against attacks using Image2Image. Running an image through I2I as-is would be able to destroy the watermark with min

I wonder how deep watermarks would perform against attacks using Image2Image. Running an image through I2I as-is would be able to destroy the watermark with minimal/minor changes, and out-painting may significantly impact certain watermarking methods by wrapping images with random contents.