if we train a reverse encoder of the output of the GAN back to its own latent space, it's probably possible to find your face and mess with it.