And each day a model remains unchanged, attackers get to test and experiment with how to make it tick. And every attack that works remains on the internet, forever, just waiting to be ingested as context.

"We'll just stop training and we'll be profitable!"