This is highly oversimplified. The previous example of antagonistic samples being found works even if the training data was perturbed as you described. The reas

This is highly oversimplified. The previous example of antagonistic samples being found works even if the training data was perturbed as you described. The reasons for saccades are also a lot more complex, involving photoreceptor adaptation etc.