The default Kubernetes networking model allows all pod-to-pod communication. Without explicit network policies, lateral movement is trivial.