Comment by forgotaccount3

> Full zero trust internally

I try so hard for this, but don't even get approval to change an internal site to use https instead of http.

I get we gotta keep the new features and workflows coming, but a single resource dedicated to low hanging fruit of security could fix a lot in a very short time.