The same thing that happens with DAN jailbreaks of GPT-4.

Nothing.

The barrier between bad actors and bad acts was never a shopping list.