This may seem surprising in light of the negative results of [2], who showed that there exist (contrived) families of unobfuscatable functions for which the VBB definition is impossible to achieve in the plain model.