Your 2nd point is critical, you can filter these images easily before even running them through the DNN. However researchers are also interested in why it is po

Your 2nd point is critical, you can filter these images easily before even running them through the DNN. However researchers are also interested in why it is possible to spoof NN's in general. The typical response of 'overfitting' is being questioned. Also the question is raised as to whether or not new methods of spoofing are possible that aren't so easily detectable.