I think just safeguarding from the model input perspective might not be enough. There might need to be another model to just take the output of ChatGPT and detect if there are any dangerous keyword combinations, regardless of context.