It can likely work in images where you can make subtle, human-undetectable tweaks across thousands/millions of pixels, each with many possible values.

Nearly impossible across data with a couple hundred characters and dozens to thousands of tokens.