“It is feasible to poison future foundation models by uploading malicious data to platforms like Flickr or Twitter for a cost of approximately $60.”