Why policies fail
Policies fail when they are written by one team for one audience and assume everyone else will fall in line. Security policy that ignores accessibility produces controls people can't use. Accessibility policy that ignores security produces well-intentioned exemptions that become attack paths.
