Unfortunately, the term "zero trust" has been used by some to promote their insider threat tool/service. I've seen a lot of sales pitches from vendors that incl

Unfortunately, the term "zero trust" has been used by some to promote their insider threat tool/service. I've seen a lot of sales pitches from vendors that include slides about how their tool prevents the next Snowden. If you go back to the original sources of the zero trust concept stress that it should only apply to machines. Processes really don't have the concept of "trust" that people do (gain/lose trust, trusted to a degree, etc.). So we should build systems with that in mind.