There is a very good reason for this...
The SPOs aren't supposed to have a say in these parameters. In fact, after seeing this post from
@_KtorZ_, I now believe it was a mistake to give SPOs a say in the Security Parameters.
For a bit of history: The "Security Parameter" category was added to CIP-1694 late. It's not even an independent category, it's a bunch of different parameters from the Network, Economic, Technical, and Governance groups that are cross-listed as "Security" because or their vital importance to the system.
To make the "Security Parameters" more robust, the SPOs were given a vote in their governance. The reasoning was that it's because SPOs are "technical experts"... but is that really the case?
Many SPOs are Script Kiddies, utilizing the
#Cardano SPO script set to do the great majority of their work. Other SPOs are influencers or great marketers, who employ a tech janitor to keep their pools and nodes running for them.
I'm not saying these people aren't valuable! And there are certainly SPOs who are deep technical experts. But we also have technical experts who build software and work on projects who do not run pools.
Why should an influencer who hires a tech janitor to run their pool have more say over parameters in the system than
@adamKDean who retired his (successfully running) pool to focus on building software?
Ultimately, the SPOs do have a way to have a say on Parameters. They can advise their DReps on what they think are the proper thresholds or they can become a DRep themselves!
Keep in mind, both now and after the Chang Hardfork the SPOs still have the power to choose what version of the Cardano node software they will run. They can choose to break the Constitution and change the way Cardano operates if they wish. This is something that the DReps are constrained from doing by the Constitutional Committee.
But the entire reason we have DReps is to provide Ada Holders with a group of representatives who are separate from the SPOs, so that if SPOs do not wish to engage in making choices on how the system is governed - and instead just run the software according to whatever rules are decided upon by the community - they are welcome to do so.
[Closing note: No shade is being cast on
@_KtorZ_ here. He has a great mind for governance and any differences of opinion I might have from him are held in good faith.]