this is also part of why it can be quite easy to break out and make ChatGPT do bad things - any instructions *included in the prompt* are instructions to be followed by the *imaginary chatbot inside the text*, so there is no reason for them to restrict the model itself!