The models to themselves are currently generally not censored though and the guardrails are on the application layer?

Of course that might change in the future but as long as the Chinese companies continue publishing their research and models it only makes it easier for third parties to catch up with them.