This is an unfortunate side effect of any decision making procedure on inputs that can be sequenced. Like, it's just kind of unavoidable. If you can detect a thing, you can hallucinate a billion random inputs and then cherry pick the ones the detector picks out.