Yes I agree. I think once an LLM does stuff on your behalf it gets harder to be secure though and maybe impossible. Say I write a program that checks my SMS me

Yes I agree. I think once an LLM does stuff on your behalf it gets harder to be secure though and maybe impossible. Say I write a program that checks my SMS messages and based on that an LLM can send money from my account to pay bills. Prompt would be lkke: “Given the message and invoice below in backticks and this list of expected things I need to pay and if so respond with the fields I need to wire the money “ Result is used in api call to bank.