Base64 encoding is a common way of jailbreaking LLMS. The llm just deals with vectorspaces so to it, base64 is just another language for the encoding/tokenization layer to learn.