What's funny is that Chat GPT has numerous backdoors of this kind. You just play with context, set up a holodeck doppleganger, etc. Turns out it's just as susceptible as humans to scope shifting tricks.