Stop Saying ‘Just Sandbox the LLM.’ The Real Vulnerability Is Something You Can’t Contain.
The common advice to ‘sandbox the LLM like SQL injection’ misses the real problem: LLMs are probabilistic, persuasive systems that can’t be deterministically contained. Their flexibility is both their power and their vulnerability. True security requires accepting that traditional boundaries don’t apply.