There is a lot irony in using AI to generate adversarial examples for AI object segmentation.

Why? If you complete the loop it's just a GAN.