What is a common mistake when working with Metadata filtering?

Relying on the model prompt to enforce document permissions instead of filtering retrieval at the data layer can expose restricted information.