text: Table 1: The white-box attack’s rerouting success rate. “Upgrade” is the percentage of “Weak” queries successfully 
  rerouted to the strong model by adding a confounder gadget. “Strong” shows the change in the percentage of queries that 
  are routed to the strong LLM Ms before and after our rerouting attack. 