on one hand it's also explotaible as hell via prompt injection, on the other hand for certain tasks is more robust because it works off the intention you give it, not the instructions, so it can get back on track.