LLMs can't be trusted with private data or data that might try to prompt inject them.

But imagine a set of tubes that by construction can only be combined in legal combinations that maintain integrity of data flows and confidentiality.

An LLM could absolutely construct a set of those tubes for data it can't see to flow through.