[dbpatterson]

you ignored "and mark every sensitive field with a special value", which is the key part. As long as all sensitive data has been essentially zero'd out (for some value of zero), all is fine.

[codexon]

Marking a field sounds to me like labeling and not zeroing it out.