Just like phishing for gullible humans, prompt injecting AIs is here to stay