A private-only storage design has a private endpoint but retains unrestricted public network access. Which concern remains?

1. A longer object name solves the public path
2. Blob versioning automatically closes the public endpoint
3. The public endpoint can still expose an allowed path unless service settings restrict it
4. Every authorized private request must fail by definition