I understand, however no PII is involved in this case. The primary motivation is that "they're always being hacked" (words of their security team), so they try

I understand, however no PII is involved in this case. The primary motivation is that "they're always being hacked" (words of their security team), so they try to run a tight ship. I can understand that. I'm hoping to find some kind of technical solution to this, e.g. running a newer version of k8s with limited access on top of their EOL k8s 1.14. So far I didn't find anything.