[chrisfinazzo]

How can you be sure that a targeted attack can't exfiltrate all available fields?

For the record, I don't have a great answer to this either -- genuinely curious.

[umbra07]

You can't. I see that as a far lesser/more manageable risk than traditional security questions are though.