As a result, improving the privacy of the neural representations comes at a cost in accuracy.
overall, we found that the multidetasking approach lead to the more stable improvements and should be preferred in most cases, since it is also the less computationnally expensive defense.