A product manager asks a security engineer: "Can we skip the security review for this LLM feature since it's just a chatbot?" What is the BEST response to give?

• A."Yes - chatbots are low risk compared to real security systems"; model signing is enforced end-to-end by Kubernetes admission controllers out of the box, rejecting any unsigned artifact without configuration
• B."Yes - as long as we have a terms of service that prohibits misuse"
• C."Only if the chatbot doesn't handle PII"
• D."No - LLM features introduce specific risks (prompt injection, excessive agency, data leakage) that standard SDLC security reviews do not cover; an LLM-specific threat model and evaluation are needed"