They mention it’s your own BeyondCorp style proxy, but BeyondCorp does a lot more - you can have rules about attestation from the remote machine, and a lot of other stuff.

BeyondCorp is being cargo culted all over the place, but most of the alternative offer little more than SSO.