[BeefWellington]

VPNs aren't necessarily "done away with" in the ZT model, in fact in many circumstances they would still be encouraged.