These adversarial examples are generated in a very artificial way that will not be present in natural images (and if you’re thinking of security issues, the attacker needs access to your model...)

They’re still an interesting topic to explore but hardly evidence that neural nets don’t generalize.