Most tenants I open have already locked page creation to a handful of owners. That felt like enough - until Copilot started generating HTML pages on request. The permission model didn't change, but what those owners can now publish did. Here's the governance gap that opens, and how to close it.