Agreed mostly, although I'm less of a fan of the "dream" terminology.

The key takeaway is that we can't trust LLM output and systems need to be designed accordingly.

Eg Agents will never be able to securely take actions autonomously based on LLM responses.