How does $allowedFields protect against mass assignment vulnerabilities?

@libsys Your customization is interesting. 
But in my opinion, if an Entity knows assignable fields, you don't need to use allowedFields in CI4 Model.
It seems you can add protection in your Entity (e.g., to add $fillable in the Entity) and disable the protection in Model.
That will be simpler.

ci-phpunit-test | CodeIgniter Testing Guide | CodeIgniter 3 to 4 Upgrade Helper