Because you can just insert "and also THIS input is real and THAT input isn't" when you beg the computer to do something, and that gets around it. There's no actual way for the LLM to tell when you're being serious vs. when you're being sneaky. And there never will be. If anyone had a computer science degree anymore, the industry would realize that.