A team labels a model Confidential. Why must it still configure access permissions?

1. Sensitivity classification does not replace authorization
2. Labels automatically remove every unauthorized row
3. Labels grant all employees access
4. Only unlabeled items can have permissions