Adversarial noise/examples that produce the desired output across different models – does it exist and if not is it within the realm of possibility? Is it wrong to think that models that do X might be susceptible to noise in the form of Y? This can easily be tested empirically but is there any existing theory that suggests one way or the other?