I suppose in some contexts, refusals are a bad thing.

But if you're doing anything where your AI agent might get exposed to a prompt injection attack, you might prefer it to do a refusal in that case.