Components must be able to limit the resources that security functions consume, so that the functions cannot exhaust the component's resources (SL 1). No enhancement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.