A secure Azure landing zone can still fail if it makes developers fight the platform instead of making the right choices easier.