You don't even need that, all models are susceptible to prompt injection. You already need to take extreme security precautions and assume all models can essent

You don't even need that, all models are susceptible to prompt injection. You already need to take extreme security precautions and assume all models can essentially behave like attacker-controlled rootkits.