guard rails are definitely possible, they just don't care, the first stable difussion was also able to produce CSAM, but then the subsequent versions automatically blurred the picture beyond recognition if people tried.