This is a problem with AI/ML in general. Things like object recognition and facial recognition can be tricked to misclassify an image by manipulating specific p

This is a problem with AI/ML in general. Things like object recognition and facial recognition can be tricked to misclassify an image by manipulating specific pixels in certain ways. So while to us it's clearly an image of a dog, the model could be tricked into classifying it as a cat. Adding spaces to a prompt injection attack feels very similar to that.