i think you have point about "sql injection" type hacking. If you look at the history of that we all accepted user input from users and made sql with just contacting strings until:

Robert'); DROP TABLE Students;--

then everyone when Ohhhh and sql injection is now known and you never accept user input without cleaning it first but... someone will find a version of this for prompt engineering and THEN the engineers will fix it and guard against it. In that order.