Great article from Tailscale about how security policies we've often seen in many large complex organizations that we all love to hate don't actually provide the security that we assumed.

https://tailscale.com/blog/frequent-reath-security