Technically Meta was prompt injecting their own chatbot. The bug is that they prompt injected everyone else's chatbots too