There are documented instances of LLMs casually using LPEs in order to achieve an objective: https://xcancel.com/sluongng/status/2060746160558543217 https://xca

There are documented instances of LLMs casually using LPEs in order to achieve an objective: https://xcancel.com/sluongng/status/2060746160558543217 https://xcancel.com/sluongng/status/2060746160558543217 And that's without anything like prompt injection happening.