“There has been no meaningful progress in solving the core problems of adversarial robustness, prompt injection, and jailbreaking in large language models over the past two years.”