Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs