While I agree that many mitigations can cause issues and performance degradations, as someone who has been on a lot of incident response scenarios, I think it’s often (not always!) a cost well worth paying.