> If they were blocking administrators from executing arbitrary code or having arbitrary access to I/Os, that would be a different story.

I think this is the exact story being discussed here.