The most remarkable factor is input image resolution. Some detectors are highly sensitive, and fail when inputs are resized (top row). This is a severe vulnerability that malicious actors may exploit. Other detectors have an optimal input resolution, that can be optimized (bottom row).