Which AI Safety techniques will be ineffective against diffusion models? — LessWrong