When AI systems process untrusted input, that input can carry hidden instructions that hijack the model's behavior. Treating all external content as untrusted — and isolating it from system instructions — defends against the injection attacks unique to AI.
“User input can talk to your AI. Assume it's lying.”