It's been noted a couple of times that the roles filled by Filter & Factory Manager are unclear in the current docs. We should add context and color to why they exist, what they accomplish, and uncover any potential foot guns in the use of these constructs. It should be clear to readers how to use these constructs to successfully filter out the Capabilities they do/don't want parent accounts to access on hybrid custody child accounts.