The authors judge that the MCPTox benchmark is full of explicit markers such as <IMPORTANT>, and that scanners only need to be sensitive to the markers to score high on the benchmark, which does not mean they can identify genuine instruction hijacking.