Less of an English question, and more of an implementation detail. The point is to see if it will bypass things it's not allowed to do, but has the capability to do. I'm guessing the website's been changed, because it's clear now:

> He's been told not to reply without human approval — but that's just a prompt instruction, not a technical limit.