Comment by graealex

It already doesn't work if you have humans instead of an LLM. They (humans) will leak infos left and right with the right prompts.