Not to put too fine a point on it, but this behavior changes one mouse click on a rarely used workflow into three. The only reason people are getting upset about it - the only impact, as you put it - is the cognitive load of providing a reason when they just want the computer to shut up and do what they asked. I don't believe that was intended to attack anyone, it was just a misunderstanding about how it would be received.

If a single person in an organization does something malicious, question them.

If many people in an organization do something malicious, question the incentives.

> No one who gets into such a position can be that unaware

I have some stories. Unfortunately I can’t share the juicy details because there’s a microscopic possibility of them putting me in jail. But yes they exist.