Comment by solid_fuel

Some people are chattering like this is malware, but it's just text on stdout. Mechanistically I don't think it's in the same class as malware, it is at worst an _opinion_. The fact that LLMs are structurally incapable of separating user instructions from content is an issue with LLM design, not the responsibility of anyone voicing an opinion in a project they run.