The thing is though, it doesn’t need to have access to your personal info in the context, so it cant leak anything. And they are obviously used to people talking all sorts of jailbreak shit to their chatbot - so it isn’t really much worse than that.

Also I reckon the cost of running a text chatbot is basically peanuts now (that is, for a giant tech company with piles of hard cash to burn to keep the server farm warm)