[jbxntuehineoh]

yeah but cryptographic systems at least have fairly rigorous bounds. the probability of prompt-injecting an llm is >> 2^-whatever