You say that, but MISP is nice and modular, it's very easy to start integrating it into daily workflows and staggering deployment if you have a dedicated threat-intel team.