Give me your attention: dot-product attention considered harmful for adversarial patch robustness by Lovisotto, G, Finnie, N, Munoz, M, Mummadi, CK, Metzen, JH