This is the right answer. Standards and recommendations are good. Let vendors and individual companies implement them, as needed.