IMHO it does not make sense to refer to the tenantId column of a tenant-specific table in a query or DML explicitly.  There is two ways to dealing with it: (1) hide the column for tenant-specific tables from metadata or (2) error out if it's used in query/DML.  We do neither now.   Already have an issue filed for (1).  Will file one for (2).