We have guardrails for input/output and nudity classifiers have existed for a long time, can they not run these things?

eg: https://huggingface.co/zentropi-ai

There's even work to detect harmful content retraining directly from LoRA weights: https://arxiv.org/pdf/2607.25750