To the extent that it is, that's on the ChatGPT owners/developers to correct. If they can keep DAN from working (without interfering with DAN contributors), then maybe bad actors can't circumvent the safeguards either.