Disclaimer - I work at Microsoft
They put a lot of work into the research to make this safe already - they had the model red team itself, in a reinforcement learning environment probably. It won't be perfect, but at this point, they need a huge user base to adversarial test it any further. Otherwise no progress at all would be made.
edit - I should say I have no internal knowledge about this.