[danielrmay]

> I am less worried about prompt injection now.

Why? The exfiltration vector was known, the sample size was small, and the safety instructions were likely statically positioned. In regular operating practice, none of these three guarantees may hold.

[cuchoi]

100%. I am less worried because I thought this would be easier to crack.