> I am less worried about prompt injection now.

Why? The exfiltration vector was known, the sample size was small, and the safety instructions were likely statically positioned. In regular operating practice, none of these three guarantees may hold.