A tool masks selected sensitive fields in supported query results. Why must the application still enforce data permissions?

1. Masking presentation is not a complete authorization boundary
2. Masking replaces all network isolation requirements
3. Masking guarantees all stored source values are irreversibly deleted
4. Masking grants every user permission to update all data