What's interesting here is that it seems one can inject "facts" (true or not) into ChatGPT, and ChatGPT appears to take them at face value and use them to update its subsequent responses. This seems like a huge vulnerability to me.