Access Control Onion

I see they are still using the old firewall/public/private network model. You'd think that Zero Trust would be in the loop these days.