> I’m fairly certain if you give any substitution cypher to an LLM it will decipher the message.

*with sufficiently long cyphertext

You can construct encoding in the way that every 2-5 words will use a brand new different key. Remember, Unicode is big enough to fit over 10000 English alphabets.