I guess we’ll know what’s possible once Bing with open AI is more widely available. What’s preventing me from injecting a prompt without the users knowledge, an

I guess we’ll know what’s possible once Bing with open AI is more widely available. What’s preventing me from injecting a prompt without the users knowledge, and forcing responses slanted to certain political leanings?