Most ReLU Networks Suffer from \ ell^2 Adversarial Perturbations - Daniely, Amit; Shacham, Hadas (Advances in Neural Information Processing Systems, 2020)