IMHO the single-controller case solves more than just security because you can infer a lot less if you fragment the sources (of course this assumes you’re not a huge company users use all the time). But in general agreed, we need more than that. I guess I have some work left ;)
♥ 1