That is an excellent comment by DJB, and one with which I concur. There is an inverse relationship with privilege minimization also, that many commodity operat

That is an excellent comment by DJB, and one with which I concur. There is an inverse relationship with privilege minimization also, that many commodity operating systems require users to maintain a certain amount of privilege to effectively use the system. Reduction of privilege then results in a loss of functionality if there is not a replacing system. With things like high level privileges for admin, but not truly Forest Admin / Enterprise Admin, we only saw native fixes for this recently with the addition of JIT / JEA circa ~2017, or, use of 3rd party administration tools.