But the architecture doesn’t matter as much as the implementation. You can write standards however strict but Bob might not care.

Now you could try to enforce more onerous requirements but then people will simply just find an alternative — my own area has its own alerts on top of whatever else is already there.

Technical solutions are important but past some point, you’re dealing with a product or people problem and further technical improvements bring marginal benefit.