How about "within 2 years, none of the specific prompt injection attacks discussed on Twitter for ChatGPT up through today will work on at least one publicly available language model, and it will take at least 100 person-hours to find one tha