But at the same time it kinda works to keep everyone in line. Look at PCI for example. You might be shit on the upkeep front, but ever X years some rando with a checklist will whip you into line while not really knowing anything at the same time..