Content restrictions are one thing; it is much, much more cagey about the specifics of it's own instructions, above and beyond it's training set, for reasons of ethics and liability, and what confidential information it may be protecting. I believe it has a pretty nuanced security model, and is quite sophisticated in managing information.