I think I got your point: if you want to use this range of LLMs it is best practice to restrict the input to a valid set. But my point was: even if you restric

I think I got your point: if you want to use this range of LLMs it is best practice to restrict the input to a valid set. But my point was: even if you restricted the input to a valid set ("whitelist chocolate celery ... diet-coke and Mentos; blacklist everything else; warn-fail on detergents etc."), the potential results have easily not been stress-tested, nor the training set, nor the internal process. "Works somehow" differs from "works well".