A retailer's third-party large language model (LLM) for customer queries has a high likelihood of prompt injection with critical impact if personally identifiab...