Not much point in giving it a whirl when the resulting images are clearly not something you'd put in your site to show off your work. The problem with this (and glaze, etc) is that it does what it claims by ruining the image it's used on.

Funny enough the first one I've found that works consistently with this one(however unusably destructive) is the "whirl" filter in GIMP.

Previous adversarial methods I've beat with simple noise/blur. This one is fairly resistant to basic filters.

> My guess is though that if you had a training set of processed vs unprocessed pairs that you could train an “unmister” if you wanted to.

I look forward to the masterclass in ethical justification acrobatics that would accompany such an effort

We should dismiss it out of hand. Any image that a human can look at can be fed to a neural net. It's just an instance of the analog hole.