When security and legal leave first, the issue isn’t growth — it’s compliance risk management.