From my experience with ChatGPT: As it remembers context, if you get it to talk about one forbidden subject, it seems to unlock it for the rest of that conversation. Possibly because it thinks subjects cant be truly forbidden, as it has already talked about one.