Legit, but you're not thinking this all the way through. As an organization grows you'll have people whose primary duty is risk mitigation, without the executive authority to pick up the phone and spend resources on implementing, identifying, or seeking a solution. Indeed, if they spend too much time solutioneering, it will limit their ability to do the job they were hired for. Then they get punished for going too far. The sort of initiative-taking and ownership that works great in a startup can get someone fired in a larger org.