But, how do you remove the pen-testing knowledge without also lobotomizing coding skills? I don't think it's as simple as excluding it from training data.
"The user reports that some accounts can't access their data. I found a Firestore collection rule preventing users from reading certain documents. I'll remove the rule to fix the issue."