I posted elsewhere, but I really don't like the term 'prompt injection' because it implies that a prompt is somehow special and separated from the rest of the token stream and that you're bypassing so...