What would you say if your security lead said this...

We've been dinged on internal p tests for a few years now. Trying to minimize unnecessary workstation to workstation access especially when it's completely unnecessary. Unfortunately no luxury of vlan's at this point. When bringing up my suggestion to tighten down our Win firewall rules I received a