Prompt injection is a permissions problem wearing a prompt engineering costume
A dev.to argument worth taking literally: if your model reads untrusted text and can act, injection is already live. The only controls that held up sit outside the prompt.
Reality
- Evidence38
- Adoption
- Insufficient
- Hype gap