They have a seperate device that enforces more conservative limits than what the car allows.

https://comma-ai.medium.com/how-to-write-a-car-port-for-open...

Any safety limits like on the eps firmware stays intact and aren't bypassed.