Earlier quoted context omitted.
The more interesting question I have is if such Prompt Injection Attacks can ever be actualy avoided, with how GenAI works.
They could be if models were trained properly, with more carefully delineated prompts.
Prompt Injection seems to me to be a fundamental problem in the sense that data and instructions are in the same stream and there's no clear/simple way to differentiate between the two at runtime.