Tbf, there haven't even been a single concept that would conceivably enable any kind of meaningful security to LLMs. So as of today, it really is an unmovable l

Tbf, there haven't even been a single concept that would conceivably enable any kind of meaningful security to LLMs. So as of today, it really is an unmovable limiting factor. There have been attempts to reduce the attack vector via tool use permissions and similar, and while that might've made it marginally more secure, that was only in the context of non-hostile injections. Because you're gonna let the LLM use some tools, and a smart person could likely figure out a way to use that to extract data