If you don't let it read prompt-injected text, it can't get prompt injected. Don't give it a tool to download web pages or read files (other than the ones you control).

> someone drops an update into your adblock software that writes out a log file where the text reads ...

They don't need to prompt-inject an AI if they are already dropping custom rigged software onto your computer.