Yes, but only one of these is an "injection." SQL injection attacks work by turning what's normally out-of-band signaling into in-band... but LLMs *only* have in-band signaling. There's no concept of having separate control and data streams in the first place.