Instructions shape behaviour, but they cannot grant or protect anything; entrusting access control for sensitive resources to a prompt is like writing the key to the door lock on the door.