Until people trick the bot into giving away its God password. There is the popular theory that adding a special token for [system] that can't be created from r

Until people trick the bot into giving away its God password. There is the popular theory that adding a special token for [system] that can't be created from regular text would solve a lot of the problems, but this site shows that currently a wide range of token combinations work to bring the system into "God mode", so I'm not sure if plugging one hole is enough.