multi level security defenses used to be the way, but I don't think there's a vibe coded version so openai might not have been aware of what to do here.