it's an accretion. You can do something at multiple levels. Much like in Unix you can have permissions on the device, and then, after it's mounted, you have permissions individual files in the filesystem.