Security is an architectural issue

[J65nko]

From
Security is an architectural issue: Why the principles of zero trust and least privilege matter so much right now

Which brings us to the Internet and its architectural shortcomings. While the the Internet has been hugely successful in almost every dimension, even those most closely associated with it have pointed out that it lacked a solid architectural foundation on the matter of security.

[snip]

So today we have an architecture where the default is that every device can talk to every other device, and any time we want to enforce some other behavior, we need to take some specific action – such as inserting a firewall and explicitly blocking all traffic except some specified subset.