I'm generally against using bots/LLM as therapists. But this shocked me: A user voluntarily uses prompt-injection and coding instructions to trick ChatGPT into creating a treatment plan. What should we do about this? What data did ChatGPT use to do it?