I'd bet money that the Disney deal falling through was because OpenAI couldn't guarantee that Sora couldn't be used to generate porn of their characters, since attackers will almost certainly always find new prompt injections.
Surprise surprise, it's a giant fucking black box that you can never have complete control over.