Autodiff is preventing any meaningful discussion about safety, systems trained with autodiff cannot be made safe.