data protection

'Yes, always' is the right default and the wrong answer. The interviewer wants the list of attackers it does nothing against.

'Use the Keychain' is half an answer. Interviewers check whether you know the key never leaves the hardware, the data it protects still does, and which settings stop it riding along in a backup.

One copy is a total loss. The design is about how few places weights exist, how few people can touch them, and whether a bulk copy can leave unnoticed.

Managed AI services remove servers, not responsibility. The scored answer covers identity, network, data, model, logging and governance controls that remain the customer's.

Sending prompts to a provider is a data flow like any other. The scored answer keeps it on private paths where possible, forces all model traffic through one controlled exit, and blocks everything else.

Trace the data from its owner to each actual reader. Repair the access or reuse boundary, including caches, revoked permissions and retained artifacts.

Banning AI tools moves usage to personal accounts. The answer that works gives people a sanctioned path that is easier than the shadow one.