Privacy implementation is progressive. Each tier addresses a different adversary and stops where its threat model is covered.