Model output that has seen user input is user input. User input can be dealt with securely.