Also, spot on with the HIPAA data. And a real attack vector is to trick an AI into outputting fragments of training data. ChatGPT is better now but in early days you could trick it into "how to build a bomb" scenarios w/some clever prompts. Wouldn'