Confidentiality is an access-control problem
Client confidentiality in practice means knowing who can open which matter, enforcing MFA, controlling external sharing in SharePoint and OneDrive, and being able to show what happened to a document.
We design permissions around matters and practice groups rather than inherited folder trees nobody has audited in a decade.