I am getting all columns even hidden by just running below:
$model->search($query)->get() or $model->search($query)->paginate()
As you can see in below screenshot, there is hidden columns set but in attributes you can see password, searchable and remember_token

Am I missing something?