This is just level of detail. Gemma E4B reads the sharper text until you resize down to 150x150, then it reads the other text.
Downsizing is effectively low pass filtering, so that's expected. Any scheme that transmits different messages in different frequency bands is going to be susceptible to a similar attack.
As do I. The hero image clearly says "SORRY ROBOT" to me, which is the message supposedly intended for AI... kind of a fail.
It's only when I squint hard that I can see "HAPPY HUMAN".