The fundamental problem is that unless your OS vendor coordinates ZFS updates with kernel updates, the burden falls on you to ...
The best defense against prompt injection and other AI attacks is to do some basic engineering, test more, and not rely on AI to protect you.