I did some locally hosted testing. It absolutely refused to talk about Tiananmen Square. But it was more than happy to talk about Kent State. Interesting what the model happens to think is safe and what it think is unsafe.