Because the model can defect only on distributions that we can’t generate from, as the problem of generating from a distribution can be harder than the problem of detecting samples from that distribution (in the same way that verifying the answer to a problem in NP can be easier than generating it). See for example Paul Christiano’s RSA-2048 example (explained in more detail here).
Because the model can defect only on distributions that we can’t generate from, as the problem of generating from a distribution can be harder than the problem of detecting samples from that distribution (in the same way that verifying the answer to a problem in NP can be easier than generating it). See for example Paul Christiano’s RSA-2048 example (explained in more detail here).