Excessive Invariance Causes Adversarial Vulnerability
There Is No Free Lunch In Adversarial Robustness (But There Are Unexpected Benefits)