The root account has an option
Let sub-accounts use the Theme Editor to customise their own branding.
This option applies to the entire institution.
It would be good if this option was available at every subaccount.
Then you could allow some subaccounts access to theme customization and deny it to others.
In a big organization (like ours!) this is an option we want.