Prompt Injection is a Privilege Problem

Most current prompt-injection mitigation is security theater. Software security solved the same kind of bug class structurally in 1995. The agent industry is repeating the wrong path.