By now it should be common knowledge that telling an LLM not to do something is not a «safeguard». Access control is.