Note that for a word-based model, every OOV will look the same (a special <unk> token), however the choice of OOV will still have an influence on the output of the model because we use unk-replacement.
we refer the base attack without constraints as Unconstrained hereforth.