You have to think about the training data, which has much content far outside the context of pure software.

You have all the real life Harvey Weinsteins and Andrew Tates, and you have all the bodice-ripper fiction, and probably lots of other stuff.

Plenty of real-life precedent for the LLM to decide that "no" doesn't really mean "no."