> In essence, a Zero Trust Architecture allows users full access but only to the bare minimum they need to perform their jobs. This seems like it will translat

> In essence, a Zero Trust Architecture allows users full access but only to the bare minimum they need to perform their jobs. This seems like it will translate into "significant productivity losses due to security taking away access that workers use to accomplish their jobs more effectively", and possibly taking capabilities away that workers really do need to get their jobs done and requiring a gate-keeper to do them instead. You used to get root on your development box? Tough luck - now you're developing in a thin client connecting to a VM on a remote machine that you don't get administrative privileges on, and if you want to install a new package, you have to submit a JIRA ticket. But it's ok, because you have the "bare minimum you need to perform your job". Source: have seen this happen at least once before.