There is actually an older method for countering steganography and adversarial image generation attacks: https://en.wikipedia.org/wiki/Gaussian_blur
AFAIK these methods claim to be blur resistant
AFAIK these methods claim to be blur resistant