Question: What does the "sensitivity" quantity denote?
Answer: the number of distinct word recognition outputs that an attacker can induce
Alternative answer: The expected number of unique outputs a word recognition system assigns to a set of adversarial perturbations