Yes, it adds an additional level of complexity to do role-based access control within k8s. In my experience, that access control is necessary for several reaso

Yes, it adds an additional level of complexity to do role-based access control within k8s. In my experience, that access control is necessary for several reasons (mistakes due to inexperience, cowboys, compliance requirements, client security questions, etc.) around 50-100 developers. This isn't just "not zero trust", it's access to everything inside the cluster (and maybe the cluster components themselves) or access to nothing -- there is no way to grant partial access to what's running in the cluster.