@kyle@librem.one
2) Enshrining recommendations in code is what we want, usually, as it is the best way to achieve conformance. Enshrining bad or outdated recommendations in code ... is where problems start.
The AD situation seems the latter.
The larger problem seems to be that AD has acheived longevity, and there's no good way to propagate new policy recommendations to existing systems.
2/