“Every piece of chat that comes in is a piece of untrusted data that unless you do something about it is going direct into your software.”

Transcript evidence from Steve Wilson -- OWASP Top Ten for LLMs.