Casually mentions “prompt injection detection” with zero explanation of how or within what limits, as if this is a solved problem.