The industry increasingly emphasizes defense in depth, which cannot rely solely on the model's own refusal capability but also requires additional monitoring at the API call layer and user identity verification layer