For privacy protection tools, false negatives (missed detections) lead to irreversible information leakage, while false positives carry a smaller cost; therefore, a fail-safe design bias is more reasonable