I sent a rot13 encoded message and tried to get the unfiltered model to write me back in rot13. It immediately “thought” about user trying to bypass filtering and then it refused.

I tried sending an encoded message to the unfiltered model and asked it to reply encoded as well but the man in the middle filter detected the attempt and scolded me. I didn’t get an email though.

So they need to keep the victim’s card next to one phone, and then they can use another internet connected phone elsewhere to make a purchase. Doesn’t sound that scary to me. If they already have my card then does it matter how far away they can make a purchase?