And in fact, it's very possible that the person running the LLM would want to be made aware of this information. Or that they have given their agents access to a wallet so that it can make financial decisions like the one noted here around enterprise level donations that could be in the user's self-interest. They might not WANT to sign off on everything.
Is your view that any writing with any eye towards LLMs is prompt injection? That there's no way to give them useful information?