Right, and add controls to limit the damage they can do where possible. Avoiding prompt injection looks to require superhuman intelligence.