Interesting, but is it just me or does it seem overly jumpy?
I also think that a deeper understanding of the mechanisms and techniques required to reduce jitter might offer some insights into ways of handling adversarial images.
I think a more in depth understanding of how to navigate organically introduced discontinuities could provide a baseline against which we can look to combat the maliciously introduced ones.
It most likely won't be enough - since the problem source is an adaptive and intelligent adversary.
That was Uber, just so you know