Every "best GRC tools" list follows the same formula: rank platforms from favorite to least favorite, slap on some pros and cons, call it a day. What those lists ignore is the question that matters ...