On Success and Simplicity: A Second Look at Transferable Vision–Language Attack Pipeline | AI Sec Watch