We proved that every supervised model you've ever trained has a geometric blind spot; and adversarial training makes it worse, not better