Which statement correctly describes a WASI import and its authority?

Which statement correctly describes a WASI import and its authority?

1. An import declares a required interface; the host still decides whether and with what resource scope to provide it.
2. Declaring wasi:filesystem automatically grants access to the host root filesystem.
3. A component with no socket import cannot receive any network-derived input from its host.
4. Kubernetes ServiceAccount permissions are replaced by the Wasm capability model.