It's weird that it does that given that the leaked system prompt explicitly told it not to.