My intuition is that the models from this year are really hard to successfully inject.

The labs have been pouring a ton of energy into training against these attacks, as hinted from their system cards.

Doesn't mean they can't be beaten, but you likely need a whole lot more context than a short HTTP header to do it.