> however you implement it, yet "prompt injection" is hard to define.

Seems pretty easy to me. Any injection attack is an attempt to exploit technical weakness by injecting commands into data streams.