Captchas can be made adversarial. Not sure if it's a good idea to try that with text since we don't know how humans react. Maybe that's what the Phenomenon is about?