It's going to be near on impossible to create a chatbot that cannot be manipulated into giving an answer which is user wants to hear. Even people are not completely immune to this.