Any network outside your control should be treated as compromised > - **VPN is mandatory, not optional** — Enterprise VPN with certificate authentication should activate automatically on untrusted networks > - **Certificate validation is critical** — Users should never be allowed to bypass certifica