Text this: On the adversarial robustness of Gaussian processes