If I think you're a bot I'd ask you to say the word. The word exists and it works every time. No one is going to train a foundation model just to say the word, it's too expensive.

Prompt injection can be mitigated but not this prompt rejection.