To a naked human eye, the background is purely red, because of human eye's spatial integration.
 camera's CFA can demodulate the hidden stop sign and let it be recognized by machine learing models
End-to-End Attack