  def restrict_user_fields?(user)
    user.trust_level == TrustLevel[0] && anonymous?
  end
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.