> the context back then was don't trust an endpoint just because it is on your network. I remember working for a major tech company that had contracts for big

> the context back then was don't trust an endpoint just because it is on your network. I remember working for a major tech company that had contracts for big critical industries (think oil, aviation, trains, etc.). All the R&D department pretty much rested on one Brent, because they made no efforts to upgrade their systems for 15 years+. tl;dr: I asked him: hey maybe we shouldn't trust devs computers just because they are "on the network", he just shrugged and said: "if we're compromised we'll have other things to worry about anyway". While zero trust as a goal is impossible, it still is the guiding principle that everyone should follow; especially if you have a Brent.