The issue is that even after you sanitize the instructions from the data, you have to put it back into one text blob to feed to the LLM. So any sanitization you do will be undone.