That's actually crazy and I'll keep it in mind. Right now, I am mostly using it for data generation, so no untrusted prompts are going in. I'll add a disclaimer to the repo.
I have a demo here: https://github.com/wunderwuzzi23/terminal-dillma/blob/main/d...
It's like cat -v, which shows non-printable characters rather then allowing them to be interpreted by a terminal.