Considering these are essentially document completion engines[0], can't you just start the task with the version that doesn't refuse and then continue with the version that would refuse but now has to keep going after it accepted the task? :-P

[0] in the sense that the "discussion" is basically a turn based game between you and the LLM filling a chat transcript document

The weights aren't deleted, it's just additional fine tuning, is my understanding.