Peter Duniho wrote:

Not every new rule will make sense to everyone in every case,

Why is it so wrong to expect new rules to make sense?

Turn this around, too. Adding rules has a cost. Implementing rules has a
cost. If the new rules make no sense - or don't help address the problem -
then they take away value that might be spent on something that does work.
Value spent on bad rules is time not spent on effective rules.

In other words, ineffective rules decrease security.

- Andrew