That's pretty common these days, the challenge is making those protections completely airtight. Check out how @wunderwuzzi23 defeats model resistance to stealing environment variables here for example; https://
embracethered.com/blog/posts/202
5/openhands-the-lethal-trifecta-strikes-again/
…

→ View original post on X — @simonw,