the main paper, with one additional reference for this rebuttal. 3 Reviewer 1: " a major takeaway I get is that the PGD attack seems to provide an okay approximation of robustness

We thank the reviewers for their time, effort, and helpful feedback. We will make sure to incorporate the reviewers' We address individual feedback below. "... a major takeaway I get is that the PGD attack seems to provide an okay approximation of robustness ... Reply: First, we affirm that "the PGD attack seems to provide an okay approximation of robustness compared to the It is one important future work to be done in this field, but it is outside the scope of our paper. Please consider raising your score if you like our work. Reviewer 2: Thank you for your positive review!