Comment by llbbdd

I don't know what the SOTA is especially because these types of filters get expensive, but it's definitely plausible if you have the capital, it just requires spinning up a real browser environment of some kind. I know from experience that I can very easily set up a system to deeply understand every web page I visit, and it's not hard to imagine doing that at scale in a way that can handle any kind of "prompt poisoning" to a human level. The popular Anubis bot gateway setup has skipped past that to the point of just requiring a minimum of computational power to let you in, just to keep the effort of data acquisition above the threshold that makes it a good ROI.