Really? So in 2024, folks are only deploying services that have excellent security, and not anything else? This seems like a high bar to clear but I'm curious to learn.
It’s about zero trust, includes the claim “VPNs are Deprecated!”
I, for one, will still keep using VPNs as an additional layer of security and expose only a single UDP port (WireGuard), to at least reduce the chances of that happening.
So you might have an internal service that has passed a minimal security bar that you can only establish an https connection with if you have a valid SSO token.