It's a cat-and-mouse game. If I design a detection for deepfakes, I'm giving the attacker a new discriminator to test against.