No Perfect Fix for AI Browser Prompt Injection Flaws | AI Sec Watch