It's more like an attack hypercube. Given stuff like this https://news.ycombinator.com/item?id=48421148 [0] I think it's just bonkers to fix LLM issues with more LLM sauce.

[0] I have no way to evaluate this, but that we don't know how this works and therefore also can't even begin to imagine the ways it can break or get abused, is true either way.