Isn’t it something to do with tokenisation? Like double e gets into one token or something?

Thriller! Incredible read, and good example where llm “safeguards” prevent legitimate work