Our preprint on score-based adversarial robustness is now available.