Correct.

> There needs to be first-class support for separating system instructions and user data

So much this! I wonder why nobody is working in that direction. All is needed is a special token to separate content and additional reinforcement learning.