User blog comment:Leilei.unicorn/Persistent Vandal/@comment-168424-20200210224455

Using a blanket policy is probably not a good idea. The level of protection should depend on the type of page and how much traffic you expect it to get.

Also, for important pages, always apply move protection (admin-only, of you like), because the clever vandals will move the page to a different name or namespace which can cause all kinds of havoc without actually editing the contents of the page.