This is still valid within the “use it as a last resort” framework. That doesn’t mean don’t use it, it just means think through the ramifications of using it before you do use it. If the admin comes to the conclusion that nothing else can be done, then defederate.