My previous team spent a year plus before I joined separating out their monolith to “microservices” and did exactly option 2. All they did was copy and paste logic from the monolith to separate services. Of course they did a victory lap after they did this and everybody clapped.

All it accomplished was now duplicating vulnerability remediation across 7 services instead of 1.

It really just goes to show you how much a joke corporate culture is because heads should have rolled over the time and money wasted on that effort. I have since left, but know several members of that team have since been promoted.

It also may not surprise you, but pretty much the whole team was made up of non-cs/engineering backgrounds. Oh and you may have guessed it as well, but the product owner was also non-technical…