And might even decrease security in practice if people end up working around your strict rules via an even less secure path (e.g. sending around Word documents

And might even decrease security in practice if people end up working around your strict rules via an even less secure path (e.g. sending around Word documents instead of PDF, perhaps).