For example the Vicuna uncensored model was de-censored by removing all questions that had refusals to answer from the fine-tune data. So the LLM just basically didn't have any precendent to refuse to answer anything.