Isn't prompt injection basically social engineering for LLMs already anyway?