He was talking about LLM susceptibility to prompt injection attacks, not about "open-source prompt-injection detectors", whatever that is.