One of the downsides of the SQL injection analogy is that it suggests it's a fixable problem. To avoid SQL injection, you just need to be careful and quote your strings correctly.

AI is like a SQL without quotation marks though. You just have to assume the attacker gets complete DB access.