New keys in a fail-closed policy file fail open on old readers
A local policy file that fails closed when it is invalid can still fail open when a new restriction key is added under the same schema version. Older installed readers ignore the unknown key and keep collecting exactly what the user asked to exclude. When a privacy restriction is…