What is best practice for ensuring that the OmniScript data collected from the user is...

The correct answer is D, but with one serious qualification: the Data Mapper must be configured with the proper security controls. Data Mapper Load is the OmniStudio component used to write JSON, XML, or custom input data to Salesforce objects. For secure storage, the save operation should rely on Salesforce object access, field-level security, sharing, and OmniStudio security settings rather than storing sensitive values in temporary session variables or assuming the UI framework handles everything automatically. Validation rules help data quality, not full access control. Session Variables are not the correct place to persist sensitive business data. Therefore, Data Mapper Load is the correct saving mechanism, supported by Salesforce security configuration.

================