Read permission role question

Hi,

I was reading the information on the following link (https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-permissions), and something caught my attention. In the first note, it states:

"Granting Read permission without Build permission should not be relied upon to secure sensitive data. Users with Read permission, even without Build permission, are able to access and interact with data in the semantic model."

I’m curious about how a user with only Read permissions could access and interact with the semantic model. I figure that the Export Data setting is the only available option, but I'm not entirely sure. Could a user still access the semantic model even if the Export Data option is disabled?

Thanks in advance.