Complexity Matters: Effective Dimensionality as a Measure for Adversarial Robustness