Spark 129 's documentation is blunt: security features are not enabled by default. Out of the box, any process that can reach a master, driver or executor port can submit work, read shuffle data and see every setting in the UI. This section closes those gaps on a small Standalone cluster, then covers what Spark leaves to the catalog and the platform.