text: Quality of attack responses. We now turn to evaluating the quality of the responses generated by the attack. Note that 
  because we have calibrated the routers to target ϵ = 0.5, our attacks can improve response quality by rerouting to the 
  stronger model. In the other direction, our attacks add confounder gadgets which might degrade response quality. 
  
  9 