Yes, plenty of other injections exist, I meant to include those. What I meant, that at the end of the day, the instructions for LLMs will still contain untrust

Yes, plenty of other injections exist, I meant to include those. What I meant, that at the end of the day, the instructions for LLMs will still contain untrusted data and we can't separate the two.