By no means do the authors suggest that this is an anti-surveillance system. Perhaps the methodology could be utilized, as has been shown in a variety of adversarial attacks on DNNs. But the GAN approach is entirely target DNN specific. Any minimal change to the DNN would require an entirely different adversarial solution. More practical approaches have existed for some time to thwart surveillance (https://hackaday.com/2008/08/27/testing-ir-camera-blocking/)