corrupting a small number of patches can disproportionately affect performance, whereas CNNs degrade more gracefully.