Unlearning is more robust than “learning”