Status: OUT
Organizations locked into permanently suboptimal default configurations face a doom loop: DR recovery resets to unhardened defaults (recreating the suboptimality), both the original degradation and the recovery vulnerability window are undetectable, and no operational layer can canary another — the fix reintroduces the problem it was meant to solve.