There are also things that are kinda inbetween: when the way the configuration is interpreted (in custom software) makes some of its features unusable, so that is they get used you can be mostly certain that this is misconfiguration that leads to escalations (things like constraints on ACLs that cannot be evaluated in a TOCTOU-free way) or makes them very misleading so that most places where this is configured is a misconfiguration.