That's not "baked" and only applies to remotely hosted LLMs where someone else feeds the prompt into the LLM.