Context injection is becoming the new SQL injection. Until we have better isolation layers, letting an LLM 'cowork' on sensitive repos without a middleware sanitization layer is a compliance nightmare waiting to happen.