Generative AI’s Biggest Security Flaw Is Not Easy to Fix