The Zendata gap: IAM provisions identities with static, infrequently-reviewed risk scores. Behavioral telemetry from the Zendata SDK measures what each identity actually does — surfacing drift, PII exposure, hijack attempts, and over-privileged service accounts that classical IAM never sees.