I don't understand how that's more subtle than allowing random queries. It only feels different due to the additional probabilistic layer of indirection (the LLM), but the ability is still there.
> who can already submit random queries to Postgres any time they like
A predefined, static set of queries curated by a human with common sense. LLMs have no common sense. They have context.
An LLM that takes user input and has access to a database can generate and run any query. We don't understand what queries might be generated and under what input, and I don't think we will anytime soon.
> who can already submit random queries to Postgres any time they like
A predefined, static set of queries curated by a human with common sense. LLMs have no common sense. They have context.
An LLM that takes user input and has access to a database can generate and run any query. We don't understand what queries might be generated and under what input, and I don't think we will anytime soon.