Reposted by @stinky.bsky.social

A company will spend millions of dollars to insert network IPS rather than implement default deny firewall and scoped IPsec that makes the endpoints entirely immune. You don't even need to patch them, because you cannot talk to them. But it's easier to spend millions than architect. That is the gap.