I gave Claude Fable 5 and GPT-5.6 the same physics problem — the wrong model impressed me.
Awareness of all the ways prompt injection can be effected will help security teams spot a new generation of attacks.