There’s a known fix for SQL injection and no such known fix for prompt injection