I see a lot of organizations doing exactly that. Makes sense as long as you have the right controls and visibility in place.

Meanwhile, we're in the security business… ?