Indeed, and an interpreter has been written[1]. As part of the benchmarks, in some cases the models receive a binary of the interpreter and indeed some of them attempt to reverse engineer it. So that already helps the models a bunch.
I do think this will also eventually make it into the training data, but that will in itself be interesting to see. It's also possible for KillSwitch to evolve and gain/remove features over time to constantly evade the LLMs.