Comment by quinnjh

> What’s to stop an attacker from using prompt injection against this firewall?

Clearly you need a firewall-firewall.

..defense in depth?