Comment by radial_symmetry

"They might not have enough of the knowledge to answer correctly"

Depends on the model. GPT-OSS is the main standout here, it was trained on a highly curated dataset so information that they didn't want in isn't in the pretraining at all. Most other models know the answer and were just taught refusal in post-training.