> There will come a time when properly designed LLM apps are not vulnerable, and there will still be poorly designed apps that are.

Whether it’s possible to properly secure an LLM (and retain its utility) seems to be heavily disputed, in this thread and elsewhere.