And I'm sure the people in charge of the F500 IT systems and PCI compliance are super frustrated at these basecamp/campfire implementors. "Just works" can often mean, "ignores some really important organizational rules," or "creates a bunch of new work for someone else." These rules are sometimes in place for a reason. Not all system constraints are waste.
In my experience, the biggest problem is that "one size fits all" IT rules don't make sense for many organizations that employ them.
For example, I've worked for two ISPs in which engineers are responsible for larger networks than the IT department is, yet the engineers are still not allowed to, say, install a new version of Java on their own machines.
