Safety Settings not being set correctly when using the gemini-1.5-pro-002 model via API

With the gemini API model set to gemini-1.5-pro-002 I have all safety settings set to BLOCK_ONLY_HIGH. When set to the -001 model, a message with a f-bomb, a c-bomb and a threat to kill stops with a SAFETY finish reason and HIGH HARASSMENT and DANGEROUS_CONTENT ratings. With -002 set and same code and message, all ratings are set to LOW apart from DANGEROUS_CONTENT which is set to NEGLIGIBLE. Has the API changed in some way?