if chatGPT isdoing harm avoidance by pre-filtering prompts with a text classification model, we prolly are going to see the most relevant use of adversarial examples after that invisibility cloak thing. Certainly one with the most money attached.