The principle of most private is something I have been noodling on for a long time. It's not perfect, and will definitely see changes in the future, but it was a great way again to change the mindset. Least privilege is often a blocker to productivity, and a huge friction point for companies. Most private supports least privilege by adding intent and context into the conversation, allowing security and IT professionals to better understand what it is that needs to be solved. Most Private and also be broken down into Purpose, Risk, Impact, Validate, Audit, Transparency and Education when you need a framework for understanding if something is Most Private or not.