Are they? If this is his best effort at forcing his bot to spout lies, it doesn't seem to be a great strategy.
Who says it is the best effort ?
Who says it’s the only consequence of a poisoned prompt?
If it has been tampered with on this what other answers are affected ?