Comment by Boulth

From what I've read about BeyondCorp it's far more sophisticated than just Teleport. It's also a service monitoring status of a device including boot security throughout the entire life of the decide, private keys stored in TPM, plus various tiers that depend on multiple factors.