They almost certainly did filter, but there’s always false negatives with this kind of stuff
Even if you don't train on gore that's bad enough to trip an image classifier, the model learns the concept of "more [liquid/jam/syrup/chunks/etc.]" and that can generalize to creating gore that would trip the same classifier.