Robust multimodal models have outlier features and encode more concepts