Biggest risk is invisible complexity creeping in. Rotate credentials on a calendar, not only after incidents. Keep the system operable by the smallest competent team.