But at that point it just becomes yet another escape sequence game; there's not really a solution here given that by design we only have one band to communicate with.

I mean, its just SQL injection all over again, if your method of communication can be escaped, it will.