I'm pretty skeptical you can call any claw-like thing secure unless you solve prompt injection.

Security isn't binary. There's nothing that's "secure" unless you define a threat model first.

Sounds like the kind of stuff devs that introduce security vulnerbilities say.

Unrelatedly, I wonder why I don't see the downvote arrows on comments any more.