The noise could be filtered out with enough samples, so this mitigation only increases the number of attempts required and does not prevent the attack.