SoK: On the Impossible Security of Very Large Foundation Models