A New Paper Argues Prompt Injection Cannot Be Fully Defended in Today's Architectures · Polylog