I assume he's referring to the long-standing Microsoft engineering principles of "zero trust": https://learn.microsoft.com/en-us/security/zero-trust/zero-t...

and "least privilege": https://learn.microsoft.com/en-us/entra/identity-platform/se...