Admission controllers are the way to go, but they have one huge issue. They can validate only one resource at a time. That means than we cannot make policies that take the whole context.
I think it's not that much about it being easier but being able to do in-place transformations so that the resulting manifests are pure yaml instead of overlays on top of overlays. Now, how useful that is is a different question.
