The fundamental flaw people make is assuming that LLMs (i.e. a single inference) are a lone solution when in-fact they're just part of a larger solution. If you pool together agents in a way where deterministic code meets and and verifies fuzzy LLM output, you get pretty robust autonomous action IMHO. The key is doing it in a defensible manner, assuming the worst possible exploit at every angle. Red-team thinking, constantly. Principle of least privilege etc.
So, if I may say, the question you allude to is wrong. The question IRT to SQL injection, for example, was never "how do we make strings safe?" but rather: "how do we limit the imposition of strings?".
So, if I may say, the question you allude to is wrong. The question IRT to SQL injection, for example, was never "how do we make strings safe?" but rather: "how do we limit the imposition of strings?".