I don't know how this is executed in reality but if the GPT instances aren't well isolated, it seems like you may be able to get the model to execute system lev

I don't know how this is executed in reality but if the GPT instances aren't well isolated, it seems like you may be able to get the model to execute system level code or leak prompts and information from others using the same instance. Again, I don't know how well isolated these instances are in practice. Outside of that I tend to agree with you, you're simply poking at your own isolated instance and getting back what you expect, so who cares?