could similar attack be done on gmail email summaries or similar "AI summary" features?