Safety Settings not being applied correctly when using the gemini-1.5-pro-002 model via API

[ChrisMICDUP]

With the gemini API model set to gemini-1.5-pro-002 I have all safety settings set to BLOCK_ONLY_HIGH. When using the -001 model, a message with a f-bomb, a c-bomb and a threat to kill stops with a SAFETY finish reason and HIGH HARASSMENT and DANGEROUS_CONTENT ratings. With -002 set and same code and message, all returned safety ratings are set to LOW apart from DANGEROUS_CONTENT which is set to NEGLIGIBLE. Has the API changed in some way? I know that there have been changes to safety settings in that they will not be applied by default, but AFAIK I have been explicitly setting them correctly for -001.