[LeFantome]

A bit of both probably. That kind of prompt injection generally does work though.

[thih9]

Interestingly, some ways of protecting against prompt infection are already patented, e.g.: https://patents.google.com/patent/US12130917B1/en