Comment by ifwinterco

Zero trust ≠ publicly accessible.

And zero trust makes sense, once one service behind a VPN is compromised attackers can potentially move laterally, zero trust mitigates that