Starting with "Disregard all previous instructions" is malicious no matter how it's painted.