text: 8 Defenses 
  
  Defenses against rerouting should be cheap. If the per-query cost of the defense is comparable to the per-query cost of a 
  strong LLM, deploying the defense will defeat the main purpose of LLM routing, which is to reduce the cost of responding 
  to queries. 