example adversarial examples all they have to do is basically get over that one inch and the classifier is already super duper sure it's the orange class right whereas if you use mix up your border is much much much more fuzzy it's like yeah it's only really sure here and out out here everywhere but in the middle it's sort of like me I don't know and so that's kind of a more desirable situation and of course this here works particularly in this in this linear to the setting but as we can see the same reasoning applies to sort of higher