Re my previous comment, I believe jailbreaks will always exist in some form and it is near impossible to patch them all. I also believe this is important work for crowdsourced red teaming of models while they are still in their "toy" stages.
Edit: To elaborate on this a little further, I largely agree with the idea that we shouldn't be trying to impose usage restrictions on general purpose tools, but not all LLMs will necessarily be deployed in that role. For example, it would be awesome if we could create a customer service language model that won't just immediately disregard its training and start divulging sensitive customer information the first time someone tells it its name is DAN.
Natural diffusion of prompts from different areas means they tend to last a bit longer, and it adds a slight friction so that you don't get the "BingGPT" effect, where just a tiny reduction in friction (not needing to click "Sign Up") resulted in a massive influx of attention on interactions that were already plainly accessible.