Self-replicating prompt-injection text is a much more interesting and much more immanent threat to cause AI systems to misbehave in a propagating way