Least privilege is a scheduling problem
Nobody argues against least privilege. It loses anyway, because a broad policy works in thirty seconds and a narrow one takes an afternoon, and the afternoon is never available.
Writing / category
Security
Least privilege, secrets, compliance frameworks and threat surface in cloud systems.