I’m not sure what the attack would be, tbh. Is there a situation where I would want to feed a lie to an LLM that I wouldn’t want regular chrome users to see?
Getting an AI to promote or recommend a particular product when users ask for recommendations, or perhaps exaggerating the value of a particular product. Seems like that’s what the author was getting at towards the end