Challenge 2 / 2

Because inside a voter you should check roles using the token that was passed in, and AccessDecisionManagerInterface lets you do that. The Security service might look at the “current” token instead, which can be different in some cases.

Because the Security service can’t check roles at all inside a voter, so it would always say “no” even for admins.

Because AccessDecisionManagerInterface is faster and automatically skips all other voters, while the Security service always runs every voter twice.

Because this would create a recursive dependency error.