Security posture Private knowledge sets require access control when introduced. Public graphs stay non-sensitive.