This starts to sound more like ‘social engineering a human assistant’, so there’s a degree of required specialization that does meaningfully increase costs.

I think a lot of sentiment online is that getting a model to do things it was instructed not to do is actually quite trivial.