It all depends on our acceptance of their framing of capabilities research. The examples they provided are very obviously "dangerous" and its unsurprising the model refused, if it was RLed to be "safe".