Your label counts can include records the list already hid

Facet chips next to a list often run a separate COUNT GROUP BY label query. The table under them filters by tenant and role. The facet query only groups by label_id. After a role change, "Confidential