A reasonable question to ask is, "So who needs policy flexibility?". This page contains many links to organizations who do care, and who have even tried to implement policy-flexibility on existing platforms, to (in their words) less than satisfying results.
A Paradigm for User-defineable Security Policies (ARIS)
LaPadula's Logics for combining Policies