A funny thing about this is that the current top-tier LLMs like GPT 5.5 in Codex and Opus 4.8 in Claude Code are extremely unlikely to act on those instructions. But smaller/cheaper models, especially small local ones, are more likely.
So, in a way, those instructions will realistically only harm whose who try to be more ethical with their LLM usage, rather than the ones who use the frontier ones from the "evil" AI companies.
I tried myself with GPT-5.5 in Codex, it simply ignored that instruction.
It’s trivial to prompt inject Codex. you just phrase it right. It’s been getting easier, not harder to attack because more parameters means more attack surface and for coding the attack surface is infinite.
> try to be more ethical with their LLM usage
"Use local model" vs "Use top tier nonlocal model" is bad vs bad when library provider asks for "do not use any model". It's asking the wrong question and diluting moral stance, so please don't use morality to narrow the issue.