> "prompt injection" and "social engineering" will quickly become two names for the same thing. That's really well put. Essentially they need the same mitigati

> "prompt injection" and "social engineering" will quickly become two names for the same thing. That's really well put. Essentially they need the same mitigation; education, warnings before actions, and permissions. An LLM needs to be treated as a junior assistant who is easily manipulated via social engineering. They need to have a "guest" or untrusted level of account access. "Human" in the loop is essential.