Okay, but who has more domain knowledge when to deploy? A "security expert" that created the "security product" that operates with root privileges and full tele

Okay, but who has more domain knowledge when to deploy? A "security expert" that created the "security product" that operates with root privileges and full telemetry, or IT staff member that looked at said "security expert" value proposition and didn't have issue with it. Honestly, this reads as a suggestion that even more blame ought to be shifted to the customer.