I’m sure they just dump the image into another LLM to gauge “safety” and pretend it’s good enough.