The article proves your point. It's eventually proceeded once there was the right history. If he already had the exploit and wanted the model to write an implem

The article proves your point. It's eventually proceeded once there was the right history. If he already had the exploit and wanted the model to write an implementation, faking the history could have tripped the model over the edge. So the guardrails aren't unsurmountable.