I mean, we do have encryption, which is cheap for users and expensive for bad actors. The question is whether an analogue exists for AI.
In a sense, there's three types of security: exponential, proportional, and logarithmic. Encryption strength is exponential, number of pins in a lock is proportional, and bug fixing may be logarithmic.
It's software, mostly. People will share SOTA algorithms for free, like they do today. I don't think the cost for bad actors will rise much (and it's not like most of them have money problems).
On the contrary, I imagine it'll just accelerate development of computer vision that reproduces human vision in a bug-compatible way. The only way to confuse it will be to make the image confusing to humans too.
Can I get access to high quality voice recognition or text to speech software? The only way I know is to use cloud APIs to get access to latest and greatest.
The really scary ones, sure, they may as well have resources: Yes. But that's almost the biggest part of what makes them scary.
So you would add pixels in an image that trigger cat,car, bus, street etc . You will make the technology more expensive and harder to use by majority of bad actors.