benchmarksfactneutralMulti-image mixing methods (e.g., MixUp, PuzzleMix, StarMixup) generally provide the strongest recognition performance but are often poorly calibrated and vulnerable to adversarial perturbationsComputer Vision27 Jul 2026http://arxiv.org/abs/2607.02271v1