Severance makes walled-off access look like a nightmare. In security it is one of our best protections: give every account only what it needs, so one bad click cannot light up your whole company.