Least-privilege has been enterprise doctrine for machine identities for years, yet standing, static privilege remains the default almost everywhere it's checked. This panel pushes past the usual "just fix it" advice to ask what would actually force the change - and why technical feasibility alone hasn't been enough.