The attack vector is increasingly big and the rewards are much bigger than before: instead of just databases and root access it will be immediate access to all referenced cloud products, basically nullifying encyption and multi factor authentication
Transclude of Prompt-Injection