> Finally, our evaluation did not involve active adversarial optimization.

Good luck!