SynthID can cause models to follow harmful instructions they would otherwise refuse.