A Discussion of 'Adversarial Examples Are Not Bugs, They Are Features': Robust Feature Leakage (Distill, 2019)