It's not a compromise
it's an accretion. You can do something at multiple levels. Much like in Unix you can have permissions on the device, and then, after it's mounted, you have permissions individual files in the filesystem.
--
"It\ufffds possible to build a reasonably prosperous society that invests in its people, doesn\ufffdt invade its neighbors, opposes Israel and stands up to America. (Just look at France.)"
-- James Lileks