They sometimes leak their system prompt