I'm kind of OK waiting to make rules as a reaction to an actual problem instead of anticipating something that isn't a problem yet. Rules and governance can be added to or created very quickly when needed (COVID proved that), but tend to be sticky and hard to undo.