Why is Hibernate's built-in multi-tenancy support safer than hand-rolled per-query tenant filtering?

Hand-rolled filtering requires every developer to remember to add a tenant_id condition to every single query, forever — one missed query is a cross-tenant data leak. Hibernate's discriminator strategy injects the tenant filter automatically at the SQL generation layer for every query against a multi-tenant-mapped entity, making isolation structural rather than trusted to memory.