A lot of people wrongly believe this means no firewall. If you don't use firewalls (yes, even for web traffic and SaaS, limit who can access your stuff), you are doing something wrong.
No more "trusted" red network behind firewall/VPN gateway (aka "blacker") separating it from the untrusted black network.
The metaphorical firewall is there on every endpoint.