[yusefnapora]

> ensure this doesn't happen again with more deliberate and effective prompt injection

How can this possibly be accomplished? Even if every actor in the open source world with good to neutral intentions decides that this is anti-social behavior, that does absolutely nothing to secure your system against people with bad intentions.

A system that pulls in arbitrary unstructured text input and treats it as trusted instructions is insecure by design. Asking the entire world to sanitize your inputs for you is a choice - good luck with that.

[minimaxir]

No one is asking to sanitize inputs, they're asking to not deliberately and intentionally make things insecure.

[yusefnapora]

No one is "making things insecure" here - it was already hopelessly insecure by design. The author is just revealing the uncomfortable truth.