potentially to stop bad actors from poisoning datasets by just adding the filter to real pictures?