We return immediately if the model's argmax prediction has 0 F1 score.
table 5 shows the results of evaluating the four main models on adversarial examples generated by running either ADDSENt or ADDANY against each model.