I'd disagree. Data is more important than the model. But also you can do black box attacks on AI pretty effectively. What you do is train your AI to perform a similar feat and then figure out its weaknesses. Those weaknesses are likely to translate to the other AI. Robustness is a difficult task.

As for blasting confusing data, well that already happens to human pilots. There are radar jammers, targeting jammers, visually occluding devices, etc. But hey, if an AI can operate under 90% of typical dog fight situations, then that's a big reduction in needed pilots. Then those pilots can be all trained to be aces.