I was tasked investigating, whether we could use Dynamic Data Masking to mask data on our dev instance, so that our devs can develop on real data, but not see anything sensitive. It turned out the DDM is not a very good solution for this.
However, I can't came up with scenario, for which it IS good for, since the masking is easily bypassed, and doesn't return anything meaningful either.
Have you ever seen it used productively?