We're pretty confident that adversarial attacks do work on us, actually—we have entire industries built around it. Some of them even start with "adver-"...

There are classes of adversarial attacks targeting them that don't work as well on us, and vice versa.