I suspect it's actually leaking the prompt. You can do the same thing with ChatGPT. It's not a particularly big deal honestly, the important part is hosting it and getting an people to use your service.