> If the system is broken, this is actually a good thing.

Sometimes when you reveal extensive noncompliance with dumb requirements, the requirements get less dumb. Other times, the organisation doubles down and starts punishing the noncompliance.

My employer's official security policies say everyone should kensington lock their laptop to their desk at all times, even though the office is behind two guards and three security doors. Nobody does. But if someone made a load of noise about it, there's no guarantee they'd remove the widely ignored rule; they might instead start enforcing it.