"I have access to your email, I have access to your Slack messages — when you get a message for which the context of your past can help answer it, I can just give you that draft." Hope they're thinking hard about prompt injection!

→ View original post on X — @simonw