There's AI slop and anti-AI slop

In my experience, modern models are remarkably resistant to following naive prompt injection attempts like this. While I still don't think prompt injection is a generally solvable problem, it's quite difficult to accomplish on recent models.