The author give implementation details names which are also not good naming as not reflecting the global idea.
The first big step that systems people are calling "Zero Trust" have in common is that they don't trust devices based on the (physical or virtual) network they're connecting from.
There are all kinds of other things that are still trusted, so "Zero" isn't terribly helpful.