Unfortunately bosses don't like to hear the word "No"

from here

For a long time people have been saying that security needs to align itself with the business when in reality it's the business that needs to align itself with security. If you're asking your security staff to open firewalls or make other sorts of exceptions instead of asking them for ways to do what you want to do securely then you are not helping the company be the best version of itself and are in fact increasing the chances of something bad happening.