Honestly don't understand why they have the prompt injection in arxiv of all places. One would imagine that a researcher aiming to leverage AI based reviews would only modify their private submissions.