Before revision:  Due to efficiency and safety concerns, most researchers choose to train adversary agents in simulators and generate test cases to interact with evaluated AVs.
After revision:  Due to efficiency and safety concerns, most researchers choose to train interactive adversary~(competitive or weakly competitive) agents in simulators and generate test cases to interact with evaluated AVs.