Author here, that's how I meant it. I changed my mind slightly, prompt injection can still happen, I am still careful.