My intention with multiple orgs is to follow what I think is AWS best practice. An org for identities, one for security logs, and then things to do stuff as needed. Given that caveat, I think putting the free tier on where compute gets used is easy