As shown in Table 4, the original model's accuracy degrades significantly (drops to 40.73 F1).
similar to the previous setup, the model trained on the adversarially selected distractors can recover most of its original accuracy (increases to 58.42 F1).