Feature flags are not authorization

Feature flags decide whether a product surface is rolled out. They do not decide whether this caller may act on this tenant's resource.

A flag that shows "Export" in the UI is not permission to export every document. Still authenticate the caller, then authorize the specific action against the specific resource and tenant.

Treat flags as release controls. Treat authorization as access control. Mixing them up turns a rollout switch into a silent data leak.