We’re in the “SQL injection” phase of LLMs: control language and execution language are irrecoverably mixed.