Measuring the Transferability of $\ell_\infty$ Attacks by the $\ell_2$ Norm