…which is equal parts annoying, bad for usability, and snake oil for security. Put SSL on 443 with proper ciphers, and tell me what your bloody AI shouldn’t be used for, for chrissakes.

Yes, it's different. For one thing, OpenAI is treating paying customers and malicious hackers identically.

Malicious hackers can also be paying customers. Insider attacks are generally the most successful.

That's tricky reasoning, though, because it leads you to base your business model not on serving your customers but on reacting to criminals.

The first rule of a business is to not do anything illegal before serving their customers.

It gets even tricker in this case because you're exploring new territory. What OAI chooses to do here can and likely will influence laws in the near future.