The censorship in Qwen is baked into the model's core training protocols through supervised fine-tuning and reinforcement learning from human feedback, rather than an external filter.