Detecting AI-manipulated content is a challenging arms race