I don't even think it's good for services. It's not like you go through cumbersome reviews/tools and then things are safe. They have insane homemade config languages and obscure systems that 99% of SWEs don't really understand but won't say it out loud. That's how they dropped cns2, and the postmortem is never going to blame the tools.