Bad blackout jobs are in the news since the 50s and every time an expert tells the same solution. If you want to censor something remove the information.
replies(1):
In this work we find that many current redactions of PDF text are insecure due to non-redacted character positioning information. In particular, subpixel-sized horizontal shifts in redacted and non-redacted characters can be recovered and used to effectively deredact first and last names.
Information-theoretic attacks work on black boxes too