To what extent can ASV systems naturally defend against spoofing attacks?