Data route loaders can check authentication before route UI renders and return or throw a redirect if access is not allowed.