That sounds exactly like what is going on. Are there specific ways of prompting it that can let you manipulate that moderation classifier?

(I almost think half of the point of opening up CharGPT like this is to flex the fact that they can prevent it from being Milkshake Ducked by the usual level of cherrypicking and malevolent use.)