Imagine someone asks a chatbot for a recipe, and a hidden line in a webpage tells it to insult them instead. That seems messy, sure, but my gut says we can keep patching it like any other security flaw. I am not sure how, but I do not buy that it is impossible forever.