Yeah, this paper is refreshingly conservative and practical: it takes the position that robust protection against prompt injection requires very painful trade-offs:

  These patterns impose intentional
  constraints on agents, explicitly 
  limiting their ability to perform 
  arbitrary tasks.

That's a bucket of cold water in a lot of things people are trying to build. I imagine a lot of people will ignore this advice!