“People will make layered architectures where they create very specific models that are only worried about screening for things like prompt injection.”

Transcript evidence from Steve Wilson -- OWASP Top Ten for LLMs.