My article has an example that doesn't involve messing with delimiters already.

I'm currently a pessimist about this because prompt injection has been a problem for six months now and no-one has yet come up with a convincing solution, despite the very real economic incentives to find one.