The Copilot vulnerability chain requires three steps, two of which are old-fashioned injections and request forgeries. But ...