If a detector can exist, it can be used adversarially without a human in the loop to defeat itself.