For example, I explained that if it takes a foot-high pile of paperwork to obtain an internal use SSL certificate, then the highly predictable outcome of that policy is not "greater security", but unencrypted HTTP everywhere.
The inevitable response to such feedback is that "people ought to do the right thing", which is laughable on its face. Nobody, and I mean nobody in their right mind will subject themselves to months of paperwork, procedure, and pleading for something that they consider to be optional.
"But, but, the right thing is for them to jump through those hoops anyway!" is the typical response to such logic.
This kind of argument is just futile. Someone up high has decided that they know better, that human nature will bend to their will, and will forge ahead despite being told they are wrong.