while it's good to move away from a perimeter-based sec model, zero-trust is probably the gimmickiest branding in tech in recent years. at a min, it is one-trust where the architecture trusts the cloud/infra provider and/or idp.

conditional access aside, we know sso (ie no continuous auth, skip reauth) and zta (continuous 24/7 verification) don't go together, rite? rite?!