LLMs are also really easy to trick, as we saw in the GMail white-on-white text PoC just a few days ago...