This is just level of detail. Gemma E4B reads the sharper text until you resize down to 150x150, then it reads the other text.

As do I. The hero image clearly says "SORRY ROBOT" to me, which is the message supposedly intended for AI... kind of a fail.

It's only when I squint hard that I can see "HAPPY HUMAN".

Downsizing is effectively low pass filtering, so that's expected. Any scheme that transmits different messages in different frequency bands is going to be susceptible to a similar attack.