Tenant isolation

A multi-tenant platform rests on one invariant: no customer can reach another customer's data.

Everything else is secondary. When that breaks, it is not a vulnerability in your application, it is a failure of the thing every tenant assumed. It is why isolation bugs in cloud platforms are treated with a seriousness disproportionate to their apparent severity score.