It feels a bit SQL injection all over again tbh. This should have probably been the standard from the beginning. Way more elegant than counter prompts and guardrails