Yes, if an LLM from one of these major models is prompt injected its likely its will say something like that at the end, and is good at differentiating between obviously hidden content. Or it will ignore it all together. That would be the right answer. I don't know this is a dumb idea.