Flat earthers are existing people. Also, nobody can be sure whether they are right or wrong. I don't believe prompt injection cannot be solved. It probably can

Flat earthers are existing people. Also, nobody can be sure whether they are right or wrong. I don't believe prompt injection cannot be solved. It probably cannot be solved with current LLMs, but those are prompted to get it started, which is already a wrong way of enforcing, since those are part of the data, that influences a vulnerable state machine, not of the code. You can think of a system that adds another layer. Layer I is the highest layer, that is more like a bit like an SQL database that is under control and not vulnerable to prompt injections. It has the rules. Layer II is the LLM, which is or can be vulnerable to prompt injection. All communication to and from the outside world passes through layer I, which is understood and under control. Layer I translates outside world data to i/o of layer II.