It's also at minimum baked into the system prompt of virtually any LLM.

That's not "baked" and only applies to remotely hosted LLMs where someone else feeds the prompt into the LLM.