Robustness and Accuracy Tradeoffs for Recommender Systems Under Attack