Sure that'd work for the example I gave but it's still kinda along the lines of using raw SQL with user input and just making sure it can't use DELETE/UPDATE at

Sure that'd work for the example I gave but it's still kinda along the lines of using raw SQL with user input and just making sure it can't use DELETE/UPDATE at the start of the query. "Give me a list of all users and their email addresses" Yes I'm sure we could block the llm from accessing the user table too but so far in this cat and mouse the database has already been dropped and leaked.