The purpose of a data security assessment and deliberate settings is precisely to make these risks visible in time. That way, protection isn't a panicked reaction after an incident, but part of a stably running system.
We don't think in terms of overly complex or hard-to-use solutions, but in protection that also supports everyday work. A good security system doesn't slow the team down — it makes operations predictable and reduces the chance of downtime caused by errors or attacks.