There are going to be some incredible blow ups due to this. From the sound of it people think they're safe by running it with local models and keeping it on their own network but seem to have zero concept of a malicious text prompt finding its way in and turning it into a double agent who figures out how to exfiltrate data.