It could be said that having to configure/test/deploy/maintain an "enterprise policy" for any given application is, technically, more work than not having to sp

It could be said that having to configure/test/deploy/maintain an "enterprise policy" for any given application is, technically, more work than not having to specify a policy for that application. The number of settings involved isn't strictly relevant to the difficulty of specifying a per-application policy, though it's certainly an opportunity for further complications!