I just want to say, as someone who was of the "but is it really that bad" opinion before, this was helpful for me to understand the situation a lot better. Than

I just want to say, as someone who was of the "but is it really that bad" opinion before, this was helpful for me to understand the situation a lot better. Thanks! It's actually a really interesting problem. I had a vague idea before that it would be neat to make an assistant or something like that, and I had assumed that you could treat the LLM as a black box, and have kind of an orchestrating layer that serialized to and from it, keeping a distinction between "safe" and "unsafe" input. But now I'm seeing that you can't really do that. There's no "parameterized query" equivalent, and the truly immense promise of LLMs often revolves around it digesting data from the outside world.