No way that could backfire... Prompt injection is a solved problem right?