Every new capability adds another seam.
- Users live apart from the records they own.
- Files need a second permission system.
- Background jobs quietly gain different rules.
- Provider tokens leak into client-specific code.
- Mail, realtime, and sites become separate operating worlds.


