Agreed, with a couple of caveats: - based on the perenial patch Tuesday issues I am surprised it did not happen sooner. - zero trust is a journey. we should a

Agreed, with a couple of caveats: - based on the perenial patch Tuesday issues I am surprised it did not happen sooner. - zero trust is a journey. we should accept that networks cannot be secure and instead look to implement principles of ZT away from the network. I like the open source OpenZiti project as a way to put strong identity and zt principles into our apps. Its not a panacea but it does make access and exploit much harder. - correct, though if using attribute-based access controls we can at least massively limit what an insider could get access to... 37GB of source code across multiple different project at first blush looks like more than what 1 single user should have access to.