I don't think it's easy (or even possible) to build a completely secure system.

But... for most security vulnerabilities (such as SQL injection) there are known, reliable mitigations.

That's not the case for prompt injection, which is why we need to treat it differently from other classes of vulnerability.