that "easily" is carrying a lot of weight. notwithstanding how AI is simply vulnerable to SQL injection / CB's example / etc, except unbounded through natural language
Sure it is vulnerable to prompt injection, but the only one affected by it is the person doing the prompting. Outside of "haha look I made it say a funny thing" there is really no side effect and no disruption for regular users of the service.
