I don't see how Slack is not the prime example of BeyondCorp approach? No VPN or firewall, all access control is done via centralized system. I don't know what

I don't see how Slack is not the prime example of BeyondCorp approach? No VPN or firewall, all access control is done via centralized system. I don't know what Disney was using for identity, but it could have even been Google. After all, what could have been done differently? Require password retype/MFA multiple times per day? This would drive people crazy, and if the computer ia infected then credentials could be stolen anyway.