I wish I would have followed this closer and replied sooner. What I meant was I bet the training data included a lot of self defense related content. It makes sense that it would respond in this way if the training resulted in a high probability of “don’t mess with me and I won’t mess with you” responses.