Or send a prompt injected spam in someone's GMail, doesn't even have to opened by the human end-user:

https://www.linkedin.com/posts/eito-miyamura-157305121_we-go...