Absolutely agree. This is a critical aspect that often doesn’t get enough attention, but it should definitely be taken into account when designing production-ready LLM systems.

I think we are currently still in a "Wild West" phase of reactive patching, but the industry is heading towards a future where robustness against attacks will be a requirement for every production-ready LLM system.