Sensitive systems can be exposed without the public knowing the extent of the access. Food can be recalled before investigators identify the production lot. In both situations, the absence of a complete answer changes what responsible people should do next.
It does not supply the missing answer.
GAO's September 29 review says it could not establish particular DOGE permissions or fully verify safeguards at six agencies. That is an accountability finding with real weight. It is not a finding that a data breach occurred.
Two ways to misuse an unanswered question
One response is to say that no proven harm means there is nothing to discuss. That asks the public to accept protection without the records needed to verify it. For an institution entrusted with sensitive information, showing the controls is part of the job.
The opposite response is to fill the gap with the worst imaginable event. That may produce a forceful headline, but it discards the distinction between an established failure to demonstrate protection and an established injury.
Those distinctions matter to the people whose information is held, to the employees involved, and to anyone trying to obtain a useful correction. A request for permissions, approvals and completed safeguards is harder to evade when it is anchored to the actual missing evidence.
Precaution does not require pretending to know everything
The Graziers raw-milk cheese notice illustrates a different response to uncertainty. The company says investigators have not isolated a lot or production date. The recall therefore covers all listed products currently in distribution.
That broad precaution does not mean every package has been shown to be contaminated. It means the boundary of the risk has not been narrowed enough to offer a smaller recall. FDA's outbreak advisory gives the action readers can take while the investigation continues.
These are different institutions, different duties and different potential harms. The common discipline is narrower: state what is established, state what remains unknown, and explain why the proposed action follows anyway.
Ask for the evidence that would change the answer
An uncertainty statement should point somewhere. Which record would establish who had which permission? Which investigation result would narrow the affected products? Who owns the next step, and what can a person safely do while waiting?
Those questions make uncertainty productive. They also stop “the investigation is ongoing” from becoming an indefinite substitute for explanation.
For readers, the distinction offers something better than a choice between reassurance and alarm. We can require accountability without claiming an unproven event. We can follow a precaution without pretending the investigation is finished. The unanswered question belongs in the record, alongside the reason it matters and the action that cannot wait.