The most important one for us is the `environments` feature, but indeed a lot of four-eyes-principle controls are also missing in free tier (MR approval requirements, committer verification, push rules...).