So it’s time that LLM normalise every input into a normal form and then have any rules defined on the basis of that form. Proper input cleaning.

The attacks would move to the normalization process.

Anyway, normalization would be/cause a huge step backwards in the usefulness. All of the nuance gone.