I'm guessing it's that the user roles don't have access to all of the unfiltered values so the system doesn't indirectly reveal a count of how many records there are