You always take the written policy win over thoughtful technical controls. Way easier for the whole org.