Hi,
I've seen recently customers to implement CUA for same reasons as you stated. I just checked and the latest version supports relatively new attribute "Security Policy". I think it was introduced after stating CUA is in maintenance mode only. So it looks like there are still small changes.
Cheers