Information about dangerous activities like making sarin gas is not available in public internet data, so LLMs trained on public data will never be able to provide instructions for biological weapons regardless of scaling, making the jailbreaking threat exaggerated.