Kagi may be using the official DeepSeek API and not hosting the model itself. There is work being done to make it completely uncensored:
https://github.com/huggingface/open-r1
https://ollama.com/huihui_ai/deepseek-r1-abliterated
I was mistaken though, it is more than just a system prompt causing the censorship.
Kagi uses R1 through Fireworks.ai, Together.ai and Groq.