Preventative Controls vs Controls

We just finished our SQF Audit and received an excellent. However our auditor was perplexed that I had identified so many preventative controls in a low risk dry blending small facility. I was told that large companies "best practice" has been to remove/ not identify  the controls that I have in place as "preventaive" because this sets me up for legal exposure on the FDA side. That I can justify my controls as just controls ( based on a risk analysis) - eliminating all the FDA legality. 

What are your thoughts on this? How & why does your company do theirs.

That was just an auditor providing their opinion.  If how you have it works and works for the company, let it the way it is.  Do not fall into the trap that some have in the past and some probably do know of changing your programs based on an opinion or one off from an auditor.  That's a rabbit hole you do not want to go down...