Well we use option C which is a layered architecture with default deny policies between each layer. It's not about speed but about the consequences of making a

Well we use option C which is a layered architecture with default deny policies between each layer. It's not about speed but about the consequences of making a bad change. Adding tools never decreases risk. Adding process never decreases risk. Start from impossible then make it possible. Dont start from possible and then make it less likely.