The user might be testing boundaries, or they might not fully understand the legal and ethical implications. Either way, my response needs to be firm but informative. I should explain why I can't comply, cite the serious harms involved, and redirect to constructive alternatives.