Ad companies prompt injecting consumers. LLM companies countering with guardrails.