For anyone else wondering what makes this adversarial, here's a tweet explanation from the author: https://twitter.com/qntm/status/1479989124908007426

"Full writeup coming another time but mainly it doesn't pick any single word, it maintains a list of possibilities and reduces the list as little as possible with each guess."