In my case it 100% made things worse because there is was no room for contextual interpretation of the rules. The MAS requirements went too far in one directio

In my case it 100% made things worse because there is was no room for contextual interpretation of the rules. The MAS requirements went too far in one direction and prevented us from developing more granular and observable control strategies. We essentially wound up stuck with security paradigms from the 90's. I was able to compartmentalize most of it to in-country workloads but some of it ultimately leaked back into our global builds because it was going to be too costly to maintain a total snowflake.