Cloud security is like freeways.
Bear with me ;)
The more I look into accident stats in countries that enforce speed limits and then look at Germany, the more I think that restricting people in what they can and can't do in cloud also doesn't work.
By highly restricting people's abilities in the cloud we discourage experiments which in turn means that people get much more uncomfortable trying even slightly new things and likely crash the first time they do end up going "a bit over the limit", because they're not used to it.
What do you think?