the reconstruction cost is still there, but it’s not the same shape as the pairing blowup, it no longer grows with |p| or d in the authorization layer. for the hidden-policy setting that matters, because a giant policy stops turning every receiver query into more pairings, even if the threshold recovery itself can still get ugly when |a| is large.