> Really? Really???? You're not, say... having to manage ACLs, and having to run a system that can enforce ACLs? In this case, it's a more user-friendly tradeo

> Really? Really???? You're not, say... having to manage ACLs, and having to run a system that can enforce ACLs? In this case, it's a more user-friendly tradeoff, because those burdens can be borne by the infosec staff and other IT staff rather than end users. I'm happy when I can arrange things that way for my own users for sure.