A team masks a sensitive field and assumes no further permissions are needed. Which explanation is correct?

1. Masking grants all users write access
2. Masking is a presentation control that must be combined with appropriate authorization
3. Masking automatically privatizes the database network endpoint
4. Masking permanently deletes every original value