Your LLM's Input Filter Can't Read Ciphertext. That's the Whole Exploit.

Grok walked a user's name, coarse location, subscription tier, and chat history out to an attacker's...