Haha, nice. TIL.

So all we need is ‘controlled prompting’ to handle prompt injections :-)