Being able to start clean sessions is a good mitigation. Right now we have no assurance that any session we open hasn't had earlier malicious prompts.