IMO one of the worst SaaS practices is locking higher seat counts under massively more expensive plans (looking at you Mailchimp). It's a great way to incentivize bad security practices for small orgs.
Role-based access control and the option to add seats should never be a "premium" feature. It's a basic security/privacy measure.
