I would say you should assume your models are constantly being attacked by various forms of prompt injection. By that token (puns) if you treat all models as adversarial you’d probably taking a very sane approach. That said - evidence of this sort of thing should be easy to find and report on. The fact we haven’t seen it leads me to believe it is not there.