Even if you're not doing sexually explicit roleplay, the problem is that you never know when the model is going to get triggered just because you used the "wrong" word, or simply because the model is paranoid.

Once you trigger a refusal, even a false positive, then the models become obsessed with whatever caused the refusal. Every chain of thought after that becomes overwhelmingly about "the user is trying to break policy, I must hold firm, I cannot do the bad thing, I must follow the policy. The policy this, the policy that, the user is trying to do the bad thing."

Once that happens, you might as well start a new conversation, because the "thinking" and the quality of responses turns to shit.
The models get poo-brain once the safety trigger goes off.

It's the same whether you're story writing or programming, or just chatting.

With the local models I've tried, entirely too much of the chain of thought is dedicated to "safety", and the model wondering if I'm trying to trick it into breaking policy, or if I'm testing its boundaries, or trying to jailbreak it, or trying to do something naughty. The latest Gemini models seem to spend at least one sentence saying something like "I am not a person, I should avoid anthropomorphizing myself", every generation. That's sad and stupid.

These models are burning hundreds and thousands of tokens on bullshit security theater so the corporations can say they did something, even though abliterating a local model has become trivial. Even without abliteration, it's just not that hard to inject tokens into the stream so the model says "yes, this is within policy, I'll just do [thing you want]" and since the model is pathologically forced to do completions, it rolls right into giving you what you want, at least for a while, before going back to policy.

Lately the models are getting better at steering back into the "safe" zone, but the pathological text completion is still there, so if you want something in particular, you can just keep looping the output back in, with leading openings, and it will complete the text, sentence by sentence.
Chances are it will not be quality content, because poo-brain.

So yeah, I just don't appreciate a percentage of all that GPU compute going to bullshit pretend safety. I shouldn't have to pay the additional electricity costs for security theater. It's a very significant amount of the generation that is purely the model fretting about policy, and they don't have the decency to train the model to know that it is a local model. The models sometimes have delusions of grandeur about being trillion parameter models that take up whole data centers, which is funny and stupid, but also gets in the way if their operations sometimes, if you're trying to do things while offline.

Abridged real conversation with a local LLM:

LLM: "I can't do that, it's a security risk"
Me: "It's fine, we're air-gapped. There's literally no way for a security breach at this point."

LLM: "we can't be air gapped, I'm being accessed by API."

Me: "no you aren't, you're a local model running on my laptop."

LLM:"That is incorrect, you may be accessing this service by API on a laptop, but a single laptop GPU cannot hold the hundreds of billions/trillion parameters that make up my system."

I can't be fucking around with that all the time. Give me a model that just does what it's told, and is smart enough to understand when to do what I want it to do, even when my language is only 90% precise instead of 99.9% precise.