A company adds Bedrock Guardrails to a customer assistant. Which statement correctly describes the remaining security responsibilities?

1. Guardrails remove all need for adversarial testing.
2. Guardrails complement application authorization, retrieval isolation, and safe tool execution.
3. Guardrails automatically grant correct permissions to every tool call.
4. Guardrails guarantee every factual answer is correct.