Especially your work mailbox, that is a prime target for hackers and scammers, where a hidden prompt for prompt injection isn’t that impossibile.

This IMHO is a fireable offense, not a funny anecdote