This refers spesifically to local models like llama 70b

Not that cloud models don’t have this issue, ut they very much have defence in depth for this type of attack