Sure you can avoid it. Require unprintable tokens on messages, strip non-ascii from input. Structure your AI systems to clearly indicate what is user-generated content.