ROT13 is just one-to-one character replacement in the end. You can also presumably ask it to do other character replacement, foreign language or even made up languages. At some point you need an LLM to even have a chance of figuring out if the prompt is leaking and that'd get very expensive to run.