Welcome to new generation "cybersecurity" experts that just regurgitate buzzwords like "compliance" and "guardrails" in addition to filling out risk matrix spreadsheets.

Its all PaaS/SaaS now, old-school properly engineered isolated solutions require too much expensive staffing.

I'm waiting for a vendor like zscaler to be hacked - what could go wrong with having thousands of companies do MITM SSL interception via a single vendor.

That's a nice juicy target for hackers if I ever saw one...