The right amount of trust

Zero-trust is a good slogan and a bad architecture. Zero of anything is a shape you cannot live inside.

The real design is: less trust than last year, in a way you can actually reason about at 3am.