I think you do not understand what a massive undertaking even securing a tenant in GSuite or Office 365 can be. Plus networking. Plus end user computing. On to

I think you do not understand what a massive undertaking even securing a tenant in GSuite or Office 365 can be. Plus networking. Plus end user computing. On top of this you want companies and governments to make their own tools? You have a vision... of something zero trust. Now make it and implement it. Oh, not so easy? S3 buckets used to be open by default. Office 365 had MFA as optional for a looooong time. So things are improving.