We don't know that the brain uses generative models. Generative models are pretty inefficient.

Also the original adversarial examples paper found that autoencoders were just as vulnerable. I don't see why generative models wouldn't be vulnerable.