Feature flags are great for rollout. They are a terrible substitute for authorization. A common pattern: ship an admin screen or a beta API behind a flag. Flip it off in production for most users. Flip it on for a few accounts. Ship. Move on. That controls product exposure . It does not control who is allowed to do the thing . What flags actually decide A flag answers questions like: Is this feature ready for this cohort? Should we show the new UI in staging? Are...