oifnwoivnoinvo

"Generative models are only vulnerable to adversarial examples that are actually unlikely in the data distribution. They do not have patterns or filters that can be added to ordinary images to cause wild misclassifications."

^ Actually, you are wrong on this. See this recent paper "Universal adversarial perturbations"

https://arxiv.org/pdf/1610.08401v1.pdf