Reframing prompt injection: it's about data leaving, not just input

bcampbell88 argues that prompt injection attacks are fundamentally an egress problem — the real danger isn't the malicious prompt itself but the sensitive data it can extract and send out. The framing shifts the defense strategy from input filtering toward output control, which could meaningfully change how indie developers architect AI-powered tools that handle user data.