Transfer learning with a deeper backbone: We have now tested transfer learning with an adversarially trained

We thank the reviewers for their insightful comments. A number of additional experiments were suggested. We have updated our paper to include these results. For example, our adversarially queried R2-D2 model achieves 35.53% robust 5-shot Out-of-distribution testing: We have now evaluated our models on Meta-Dataset. For the same models, on the CUB-200 dataset, the robust accuracies are 29 .04%