Comment by _pdp_

I can only speculate why this is possible but if I had to guess it is due to the fact that the external messages are effectively added as "user" type thus appear as direct instructions.

And this is far much common then one might think and classic problem across the board. There are easy solutions too.