Closing the Gap: Achieving Better Accuracy-Robustness Tradeoffs Against Query-Based Attacks