I think the commenter meant they are crowdsourcing all the exploits, so they know what to plug. As an aside, they have been using adversarial networks for this

I think the commenter meant they are crowdsourcing all the exploits, so they know what to plug. As an aside, they have been using adversarial networks for this purpose. I can’t see why they couldn’t make a model trained on jailbreaks that can find new ones. It has to be they aren’t trying hard enough. It’s like security through obscurity - make it hard enough to ward off most, so only the most highly motivated get through to GPT’s dark side.