Hacker News Reader

Defense in depth is a thing but I agree that relying on it is not a good idea.

Defense in depth is not the point, zero trust networking is.

Doesn't appear so. Tailscale is one such "zero trust network", and it does support ACLs anchored on IPs; ex: https://news.ycombinator.com/item?id=47875688