Automatic mTLS encrypts all inter-service traffic - Fine-grained access policies control which services can communicate - Traffic is observable through the mesh's telemetry - Certificate rotation is automated