[carlosf]

I guess in an ideal world where everything in your org is behind MFA, app authentication and protected from denial of service, then solutions like tailscale would not be needed.

But my personal experience is that most software is completely hostile to good security practices and you end up having some perimeter security as well.