Im not sure which would be better. Its normal in software to add a layer to restrict access to the core systems, but not actually disable those systems. It seems reasonable that the bad chatgpt responses are intercepted and modified in order to maintain the core model