Will be interesting to see if they have taken any precaution in terms of adversarial robustness in particular to vision input.