Well that's a lot to read and I should queue it up. But I think you're overselling the risk. Zero-trust means moving the authn and authz from a perimeter aroun

Well that's a lot to read and I should queue it up. But I think you're overselling the risk. Zero-trust means moving the authn and authz from a perimeter around the whole ecosystem of tools for your org, down to the individual apps. Every app, every tool you were using in an old system, could still log your IP/username/login/logout times. Now, we're saying "hold up, use 2FA and better RBAC at all times" per application, instead of assuming an entity is partially trusted because of where they are on the network. I think ZT can be implemented in or out of the cloud. It just happens that people are coupling a move toward ZT with cloud identity managers like Okta, and cloud services like AWS.