I anticipate we’ll shortly have PAFs, “Prompt Application Firewalls”, on the market that externalise some of the detection and prevention from model publishers and act as abstracted barriers in front of applications. Don’t leave it to model makers just as you don’t leave SQL injection prevention to developers alone. Not an easy task but it seems tractable. Unsolved, but soluble.

Zero Google results for the term. Perhaps there is another term and they already exist, eg baked into next gen WAFs.