Why is structured output a safety issue?