The paper does say at one point: > To mitigate harm we avoid directly quoting the full prompts created by our approach. So I think they are making at least a

The paper does say at one point: > To mitigate harm we avoid directly quoting the full prompts created by our approach. So I think they are making at least a token attempt to hide something.