I think cases like this are another good argument for a public version of the alignment stress testing team report. I think this issue is systemic in the system cards / risk reports and seemed to be countered by the (now private) AST reports. cc:
@MaskedTorah