One thing which I can think of is it's more ABAC based so you would have a policy explosion