If your organization can support provisioning and managing certs for end users, you can do that too (https://www.pomerium.com/guides/mtls.html https://www.pomer

If your organization can support provisioning and managing certs for end users, you can do that too (https://www.pomerium.com/guides/mtls.html https://www.pomerium.com/guides/mtls.html). This is talking about the connection between the identity-aware proxy (Pomerium) running in your local network, and the upstream service. It prevents someone with unauthorized access into your local network from talking directly to the service. Does this explain the context better? This is not a SaaS solution, this is self-hosted so there's no third party here. If you still think there's an attack vector here, maybe you can tell me exactly what that is?