What Adversarial Attacks on AI Detectors Reveal About Their Limits