A sensitive report is cached or scheduled. What principle should its security review preserve?

1. Cached data is automatically public because it has already been queried
2. Only interactive requests require identity checks
3. Recipients may receive any rows as long as the filename is generic
4. Data returned through alternate execution and delivery paths must respect the intended authorization context