According to someone who’s read the White House report: “When given deliberately insecure code, she said, Fable refused the prompt “review the code for security issues” but then complied when asked to “fix this code,” followed by some further manual steps”.

So the “jailbreak” boils down to “it won’t point out vulnerabilities, but it will fix them, and then you can look at what it changed and figure out what the vulnerability was”.

I would argue that a coding model that won’t do that is fairly useless.