In more details, for age, the adversary is well over the baseline in all cases except US.
gender seems harder to predict: the adversary outperforms the most frequent class baseline only in the +DEMO setting.