I think this is a good and pragmatic way to approach the use of LLM systems. By translating to an intermediate language, and then processing further symbolically. But probably you can be prompt injected also if you expose sensible "tools" to the LLM.
It's an interesting analogy. But one difference between dishwashers and LLMs is that you don't need to check the dishes afterward (if you maintain and use it properly).