All major providers use a small safety classifer, the model itself does not handle safety in cases like this