what an asinine perspective. If you remove the users autonomy from how / when that security gets applied you've now made the security situation quantifiably wo

what an asinine perspective. If you remove the users autonomy from how / when that security gets applied you've now made the security situation quantifiably worse, for 2 reasons, one users will now jump through hoops to confound your mandatory process, two you're impinging on possible mission critical infrastructure which blanket policies decided arbitrarily by a software conglomerate.