I think this misses a vector of social engineering someone to use a specific prompt that performs an action that the person may be allowed to do (say delete the

I think this misses a vector of social engineering someone to use a specific prompt that performs an action that the person may be allowed to do (say delete their account on platform X) but would likely not want to perform.