Presumably a CR can be validated by k8s against a schema and will fail at an early step. I admit I like the operator-pattern.