Can we really name this "Prompt engineering"? The prompt is so simple this is hardly any work even less than this comment

Fair point but it's not social either. It's a new class of exploit that's based on tricking the AI.