When I was a network guy I used to argue more in favor of letting everything we could over the internet. it was cheaper than the various private circuits, and

When I was a network guy I used to argue more in favor of letting everything we could over the internet. it was cheaper than the various private circuits, and more reliable than VPNs. Then when I started programming I realized we can’t trust programmers to do anything safely. And I wanted to airgap everything, but ofcourse that’s ridiculous. So while we should assume all endpoints are open to the internet, I don’t think we should actually let them be. That would be madness. does anyone expect every printer and network managed light fixture to stay up to date and vulnerability free? Even if it does, do we trust the vendors to not start spying on their customers? I suspect this was mostly about selling the enterprise on saas/the cloud/google office. And it worked.