Why isn't 'we don't allow ChatGPT' a governance strategy?

Because users use AI anyway — on their phones, on their personal accounts, on shadow tools their managers approved. Blocking is not governance; it is denial. Real governance provides a sanctioned path that meets the user's need while applying the controls the organization requires. a