+1 to not trusting your network (or any network), but that doesn&#x27;t mean you should give up on securing your clients if you have control over them (e.g. in a corporate environment). FWIW Google certainly does not ignore client security. They do assume that all networks are untrusted.<p>&quot;Google’s BeyondCorp initiative is moving to a new model that dispenses with a privileged
corporate network. Instead, access depends solely on device and user credentials, regardless
of a user’s network location—be it an enterprise location, a home network, or a hotel or
coffee shop.&quot;<p>&quot;BeyondCorp uses the concept of a “managed device,” which is a device that is procured and actively managed by the enterprise. Only managed devices can access corporate applications.&quot;<p><a href="http:&#x2F;&#x2F;static.googleusercontent.com&#x2F;media&#x2F;research.google.com&#x2F;en&#x2F;&#x2F;pubs&#x2F;archive&#x2F;43231.pdf" rel="nofollow">http:&#x2F;&#x2F;static.googleusercontent.com&#x2F;media&#x2F;research.google.co...</a>