Comment by lokar

Full zero trust internally. Both inbound and outbound proxies (different machines) to carefully limit access, and provide a place to mitigate attacks. Etc.

If your plan is to quickly apply upstream patches, your plan is bad.