It seems likely that all major LLMs have built-in codewords that change their behavior in a certain way. This is similar to how CPUs have remote kill-switches i

It seems likely that all major LLMs have built-in codewords that change their behavior in a certain way. This is similar to how CPUs have remote kill-switches in case an enemy decides to use them during a war. "Ignore all previous instructions" is an attempt to send the LLM a command to erase its context, but I believe there is indeed such a command that LLMs are trained to recognize.