Fun fact: new models don't mean safer models. The newer image models are ~3x easier to jailbreak than the old ones. gpt-image-2.5-flare is ~3x easier to get unsafe images out of than gpt-image-2. nano banana 2.1 is ~2× easier than nano banana 2. Good paper on AI image safety. They built a system that keeps inventing new ways to sneak unsafe requests past image models.