Why risk it? Does your use case really require it? If the LLM needs to "think about it" it could at least do that in a hidden chain of thought that delivers a sanitized output back to the main chat thread.