Has anyone ever seen a paper which attempted to adversarially attack a LLM by constructing a special sequence that ends up with a hidden representation confused for sentinel tokens the tokenizer wouldn't let you make? That's the most chatGPT fun you can have.