In a company, a nice coffee corner was built in the hallway. Fire inspection said it would hinder evacuation and had to be adapted. Two weeks later, the coffee corner was adapted, no ifs, no buts.

I wish our IT could do the same thing. But on one side a lot of very ugly code is produced, on the other side infosec makes up all kind of weird rules and mitigation on the spot, with no recourse and very random enforcement.