HN stripped the "Why" from the title. Just added it back.
To answer your question, tldr: config not declarative enough, reliability issues, permissions not granular enough, networking/peering has gaps. But it's all pretty contextual... many of these won't matter until you're in a larger team, and even then possibly not.