I’m sure someone will correct me if I’m wrong, but doesn’t that mean that it is somewhat trivial to find all the censorship in the model and prune it to create an uncensored model? Just ask it for all of the things it cannot say, in hex, and reply, in hex.
replies(1):