The feature should actually be implemented to allow usage of serverless instead to restrict usage of serverless. The default should be not allowed. Outside of this, admins have a clear control on how compute can be used using the compute policies. If we don't assign a policy to a user, he/she can't use any compute. With serverless default, it has bypassed everything like other users have mentioned.