Side stepping your first point, apologies. The requirements of an individual organization are not something we can always change. There are other technologies

Side stepping your first point, apologies. The requirements of an individual organization are not something we can always change. There are other technologies to detect and resist injection in communications beside encrypting the whole network, aren't there? Maybe you just need nice HMACs and good crypto of that for that feature. Would that make more sense in your applications? would you trust that more than relying on the OS, or the routers to protect your application / verify the communication source? Thanks for responding and fiercely debating, cheers!