The work keeps the design that made the original effective, a natural-language constitution, synthetic adversarial training data and guards in both directions, and addresses the practical objection that the first version added roughly a quarter to inference cost.
What to do: if you build your own guard layer, adopt the constitution-plus-synthetic-data approach and evaluate it against adaptive attacks rather than static lists.