template bleed: a document links to a template from another org, so cross-tenant writes mutate state without warning.
parent tear: child records inherit foreign keys without tenant verification, and queries resolve against alien rows.
foreign keys without tenant boundaries are just deferred corruption.