A detector's high accuracy on controlled datasets does not necessarily transfer to complex real-world environments where techniques such as encoding obfuscation, multilingual bypass, semantic paraphrasing, and segmented injection are used.