I'm aware of the "View and Edit Converted Leads" permission, which I've already set to false.
The issue is with an integration user and profile. The service using the integration user counts all lead records. We only want to count non converted leads.
When I try to access a converted lead in the UI as the integration user, it doesn't display and shows me the converted contact and account. However, if I query leads as that integration user, I can access all converted leads as well.
Is there a way to truly restrict access to converted lead records, even through API?