>>hacker+(OP)
Sure it is vulnerable to prompt injection, but the only one affected by it is the person doing the prompting. Outside of "haha look I made it say a funny thing" there is really no side effect and no disruption for regular users of the service.