A practical look at why labels and policies are not enough unless access controls are enforced before sensitive data reaches the model