Where ICT provides accessibility features, it must keep the user's privacy at the same level whether or not those features are used. Private listening through personal headsets, not speaking masked characters aloud and letting users control their personal, financial and legal data are examples. Clause 14.3 lists it as a safety and security requirement (default mode).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.