How granular should the permission system get?

The three-layer model (WP caps → space roles → trust levels) is powerful. The risk is configurability becoming overwhelming.

Where is the line between flexible and confusing? I would rather have good defaults than a hundred toggles.