It's hard for me to imagine how an adversarial machine learning attack would work in practice. Sure, you might be able to fool Shazam, but it's not like Tesla or Waymo are going to give you free access to their models.