The attack also means you can't use a system based on it for content filtering unless you get it to reliably identify multiple objects in a picture. A picture of a conch shell is harmless, a picture of a conch shell and a beheaded person may not be.