Problem is, we leave ourselves open for LLM injection attacks.