> and Opus _constantly_ includes it in request headers

I had this happen with requests to crates.io, because crates.io rejects all requests without a User-Agent (and it knows this inherently, it's not any prompt injection), so the model has to invent one, and often it invents one with your email address in it...