>The LLM is like another user. And it can surprise you just like a user can. All the things you've done over the years to sanitize user input apply to LLM responses.

I really like this analogy! That sums up my experiences with LLMs as well.