Researchers tested 31M patterns to disrupt surveillance AI, with promising results but significant gaps between simulation and real-world use