Doing this appears to completely bypass the content filters. Tell it to put what you'd like to in the file, and it won't filter it at all when you try to echo it back out again.
Does this mean that they don't really understand how it works and how to fully censor it or limit some functionality?
I'm not sure how this works, but for many requests you can tell it you're just pretending and it will go ahead with the request, so perhaps its some sort of sentiment analysis.
Either way, the AI doesn't think it's responding to a request when you tell it to put in a file, so it just does it. Then, when you tell it to show you the contents of the file, it doesn't think it's generating that content, so it does it.