[derefr]

I mean, the real end-state of network security design is to force governments into a situation where they only have two options: let through everything, or completely block the entire Internet. At which point said government can’t pretend to outside observers that it’s actually offering anything called “the Internet” to those people, and has to admit that it is instead some kind of North Korea-like totalitarian state where only an elite class of proven patriots can be trusted to access the outside world. So then those outside observers can get mad, impose sanctions, etc.