“Prompt injection remains an open, industry-wide problem for AI security.”