I work with several people who would think this is a good idea.

When they push it to prod, and our WAF goes 403 on every request, then suddenly it's my problem to "fix".