A critical application is vulnerable even though its network uses strong encryption. What does this demonstrate?

1. A second network cable fixes the vulnerability
2. Encryption disables authorization requirements
3. Transport protection does not replace application security
4. TLS guarantees input validation