With the introduction to CDS Project Oakdale, environments with the Type "Teams" are getting created. If your DLP policy doesn't have the scope of "All environments" when these new Teams environments are created they land in the "Available" tab in the "Environments" section and not the "Add to policy" tab, meaning they adhere to the DLP policy. So anyone creating a Teams environment, without knowing hey are doing it, circumvents the DLP policy.
My recommendation is that within the DLP policy we have the ability to also automatically add an environment type to the DLP policy as soon as an environment is created. So if the environment "Type" is "Teams" it gets added to the DLP policy as soon as it has been created.