Because filtering doesn't rely on those processes. It just prepends to the input instead. Instead of "the way you make a bomb is {auto complete}" it gets "I will not tell you how to make a bomb. The way you make a bomb is {auto complete}" which makes it more likely to auto complete with "hidden from you" instead of "by putting gunpowder in a pipe".