AI still fails on robust handwritten digit recognition (and how to fix it)