Why can’t user request be spicy numbers so prompt injection is impossible