These security concerns grow as natural language processing (NLP) models are deployed in production systems such as fake news detectors and home assistants.
other trigger tokens have high PMI, e.g., the top PMI token before the answer to "why" questions is indeed "because".