Protected data is not an ordinary prompt.
Connecting a model straight to sensitive records assumes the request is safe. It is not. Ordinary setups over-share, cross boundaries, reach unapproved models, and keep no record. Vrangr treats each of those as a control point.