This is true, but as I learnt [1] recently, adversarial attacks on LLMs can get incredibly sophisticated, so this is kinda apples and oranges ¯\_(ツ)_/¯

[1] https://cybernetist.com/2024/09/23/some-notes-on-adversarial...