Zero trust security is stupid

> Ultimately, I believe products that sit on endpoints will be more popular than ones that sit in between. In some ways, this is part of the trend of “shift left” and “shift right,” trying to focus on the ends rather than the middle.

What are examples of products that sit on the endpoints themselves? One thing I have seen is that because an organization does not always control every asset (like an AWS Aurora instance), they can't simply install some agent on the resource itself to check for access. Also has many more failure modes in that individual agents going down means people don't have access. I might be missing something here though so I wanted to ask.