"Lethal trifecta" will never be solved, it's fundamentally not a solvable problem. I'm really troubled to see this still isn't widely understood yet.
Exactly.
> I'm really troubled to see this still isn't widely understood yet.
Just like social-engineering is fundamentally unsolvable, so is this "Lethal trifecta" (private data access + prompt injection + data exfiltration via external communication)
In some sense people here have solved it by simply embracing it, and submitting to the danger and accepting the inevitable disaster.