[asne11]

> we repeatedly observed cases where our models refused to generate the text or images that the actors asked for

So the protections were bypassed at least some of the time. Many of these are demonstrably trivial to bypass.