Prompt injection classifiers are terrible security boundaries | Hacker News Reader