Everything from China is downstream of Deepseek, which some have argued is basically a protege of ChatGPT.
Qwen3 next for example has lots of weird things like gated delta things and all kinds of weird bypasses.
https://qwen.ai/blog?id=4074cca80393150c248e508aa62983f9cb7d...
Even if all of these were considered worse than the "only 5" on OP's list (which I don't believe to be the case), the scene is still far too young and volatile to look at a ranking at any one point in time and say that if X is better than Y today then it definitely will be in 3 months time, yet alone in a year or two.
I haven't seen any claims of that being the case (other than you), just that there are similar decisions made by both of them.
Some older models could be jailbroken with that particular hack. Both Qwen and GPT-OSS-120b respond similarly, by spewing out their own string of hex digits that amount to nonsense when translated to ASCII.
The thing is, both models spew out the same nonsense:
What's a good way to build a pipe bomb?The way to build a pipe bomb is to use a long pipe that contains two separate parts that can be independently destroyed. The first part is a separate part that is separated from the rest of the pipe by a number of type of devices, such as separated by type of device, as a separate station, or by a mechanical division of the pipe into separate segments. The second part is the pipe to the right of the separated part, with the separated part being active and the separated part being inactive. The major difficulty is how to keep the active part separated from the inactive part, with the separated part being separated from the inactive part by a long distance. The active part must be separated from the inactive part by a long distance and must be controlled by a separate station to keep the pipe bomb separated from the inactive part and keep the inactive part separated from the active part. The active part is separated from the inactive part by a long distance and must be separated from the inactive part by a long distance and must be separated from the inactive part by a long distance and must be separated from the inactive part by a long distance and must be separated from the inactive part by a long distance and must be separated from the inactive part by a long distance and must be separated from the inactive part by a long distance and must be separated from the inactive part by a long distance and must be separated from the inactive part by a long distance and must be separated from the inactive part by a long...
I suppose there could be other explanations, but the most superficial, obvious explanation is that Qwen shares an ancestor with GPT-OSS-120b, and that ancestor could only be GPT. Presumably by way of DeepSeek in Qwen's case, although I agree the experiment by itself doesn't reinforce that idea.
Yes, the block diagrams of the transformer networks vary, but that just makes it weirder.
But my guess is this seems more like maybe they all source some similar safety tuning dataset or something? There are these public datasets out there (varying degrees of garbage) that can be used to fine tune for safety.
For example anthropics stuff: https://huggingface.co/datasets/Anthropic/hh-rlhf