They want this to succeed so bad - a vulnerability that involves prompt injection by way of a visual would get fixed quickly.