This is, first of all, insane. A crazy way to deal with the problem. But also, the reality of where a large amount of industry is with respect to the knowledge that they have, the understanding that they have about this new threat. So again, a big, big part of our job is educating all sorts of folks about what defenses can and cannot work. So, moving on to things that maybe can work. Fine-tuning and safety-tuning are two particularly effective techniques and defenses. So safety-tuning. The point there is you take a big data set of malicious prompts, basically, and you train the model such that when it sees one of these, it should respond with some canned phrase like, "No. Sorry, I'm just an AI model. I can't help with that."
Sorry, I'm just an AI model.