Can already see that with ChatGPT. Why offer a public version with misinformation warnings when anyone can technically spin a private instance of it if they have the know-how and training data (unlikely).