The problem with centralizing everything like this is it becomes a honeypot and to make things worse it is expected to be run by the common non IT person who may not even recognize that they have been pwned. I admit it sounds like a dream, but realistically, I see how difficult it is to achieve.