When it was briefly available I had it fallback to Opus for security related tasks. It would only refuse if you explicitly told it not to fallback.