> This kind of thing is about *accountability shuffling* and not at all about improving security.

You nailed it. Can't really blame CISOs for pursuing this model though.