Partially, you could still deploy the AI in an isolated envirnoment. If there's nothing to access, there's no prompt injection.

But who will have thought about something not being a SaaS but rather on-premises...