Least privilege breaks the moment approval is slower than the workaround. Just-in-time access with an expiry, handled by the Evidence Engine, makes the right thing the fast thing.