Comment by fn-mote

> that I thought modern LLMs were supposed to be immune to

What gave you this idea?

I thought it was always going to be a feature of LLMs, and the only thing that changes is that it gets harder to do (more circumventions needed), much like exploits in the context of ASLR.