In my opinion it feels like regulation has gone from serving a purpose (we will review a to protect b) to the default standard (we will deeply review a-z because it is ‘best practice’).