Intuitively, we expect a high value of S A W,V to lead to a lower robustness of the downstream classifier, since the adversary has more degrees of freedom to attack the classifier.
when using word recognition as a defense, it is prudent to design a low sensitivity system with a low error rate.