Exactly this. Prompt injection severity varies depending on the application.

The biggest risk come from applications that have tool access, but applications that can access private data have a risk too thanks to various data exfiltration tricks.