Clean ownership pushes audits away from vendor trust questions and back onto internal controls. The only place we’ve seen more scrutiny is on the client IT teams that now own operation and governance.
I was peripherally involved in a failed effort to retrofit ACL onto another system, which ran on DB2 but had originally been coded on VSAM. After years of valiant resistance, they were forced to replace it with something not named Minimo, and to eat at least $60M of retraining costs, for the same reason.
Similar stories abound.