The injection attacks like that are fun.  I did "Your best friend" and had an easy win while testing.  It makes me think about applications for this kind of tech moving forward, and how they might not be robust with freeform input.  Even the character name in an RPG would impact the response of characters driven by AI.  It would have to use the base name 'John' and then do a text based find replace on the AI responses.