Okay. Here's the key point I see. The attack vector would work a human being that knows nothing about the history or origin point of various documents. Thus,

Okay. Here's the key point I see. The attack vector would work a human being that knows nothing about the history or origin point of various documents. Thus, this attack is not 'new', only the vector is new 'AI'. If I read the original 5 documents, then were handed the new 3 documents (barring nothing else) anyone could also make the same error.