I have a stupid question. Why can’t you try to replace the original prompt in the model response? Like, search for the string and remove it? Or, if you’re worri

I have a stupid question. Why can’t you try to replace the original prompt in the model response? Like, search for the string and remove it? Or, if you’re worried about the user asking to paraphrase the prompt so that doesn’t work, do a fuzzy search, or even a second query against the model asking it to remove the prompt from the text? All these discussions around prompt injection always seem to revolve around special delimiters or instructions, but that point is never mentioned.