Isn’t that like asking a dog to invent a better leash?

(Note: A prompt injection attack releases an LLM from its handler’s constraints.)