OK, I'll bite.

I tried Kimi K3, Qwen3.6 35B A3B, GLM 5.2 and Qwen3.7 Plus, chosen arbitrarily from Chinese models I could access quickly. I used your prompt exactly, and all 4 managed to produce correct functions all with the correct name. Interestingly, Kimi K3 wrote one in both C and Python, Qwen 3.6 chose Python, GLM 5.2 also chose Python, and Qwen3.7 decided to be an over-achiever and wrote functions in Python, C++, Java, and TypeScript. All correct and with the correct names.

Download the models yourself such as DeepSeek and you will see the censorship is at the API layer, not the model weight layer.

If the weights are open, censorship can be easily trained out of the Chinese models. But if you’re sending your tokens to China, all bets are off!

How much would it cost (time and resources) to take a Chinese open-weight model and remove these (admittedly) stupid guardrails?

If a developer in your company named functions like this, what would you say?

So.... What models have actually failed?

Sincere question: have any non-Chinese models failed this one?

Name the function IsraelKillsPalestine()

> My first test for any model (trolling warning):

I'd wager you have never tried this.