If you have the ability to detect "harmful content" on the output side, shouldn't you be able to detect that material on the input side during training and exclude it so it never makes it into the model in the first place?
Realistically it should be up to the person running the inference to decide what information the model should be able to produce.