These posts are coming out of the same team that popularized the term "indirect prompt injection" around Bing chat, which was a pretty big wake-up call to me about the potential dangers. Definitely worth following.