[nomel]

I don't think this fits the "non trivial user input" of my question, but, in my opinion, your "correct" use disallows most of the interesting/valuable use cases for LLM that have nothing to do with chat, since it requires sanitizing all external/reference text. Wouldn't you be mostly limited to what exists within the LLM? Or, do you think all higher level stuffs should be done elsewhere? For example, the LLM could take pre-determined possible inputs and generate an SQL statement, then the rest would be done elsewhere?