Information about targets leaks into features or prompt context, inflating metrics.