Earlier quoted context omitted.
These system prompts are not the only safety layer that these models use. There's other more deterministic filters in place both on input and (streaming) output.
I think it is fair to argue that prompts are not a safety layer at all and can't be relied upon for much. "Make no mistakes"
my steel yield strength table is similarly not guaranteed to be correct for the piece of steel that I have in front of me.