Well my concern instantly spiked. Recently Gemini started to show a search spinner for every turn. So every response paired with a search could be subject to prompt injection. Probably every response.

This will also become viral like link spam. Every user content site will become a prompt injection host. The problem is that these are way harder to detect then a link.