untagged-nodes-always-visible

Summary

Any node that lacks access tags is treated as public — it will show up in every query regardless of who is asking. This means access control is opt-in: you only get filtering if you explicitly tag a node, so untagged content is visible to everyone by default.