It doesn't seem surprising to me that AI can be fooled by adversarial input. Human brains, as advanced as they are compared to contemporary AI, are also vulnerable to this. People figured out a long time ago that hunters, soldiers, and other military assets can be camouflaged quite effectively by painting them in certain patterns, for example.

Also ask any Illusionist / magician.