> fix SharePoint governance and do lots of risk assessment

Pretty sure that's the product requirement that drove MS Purview (previously: MS data protection?).

No business wants to take the time to do data classification. No business is going to do cool new stuff with sensitive data.

... Therefore, flip Microsoft Purview on and when you leak data you now have someone to point the finger at. And can do cool stuff.