Apple can't hand wave away prompt injection attacks. They would be absolute fools to deploy the technology as it exists now at their scale.