Prompt injection is a cat and mouse game, which likely won't be able to be solved at a high level like this