Randomly reading about "Zero Trust Network Architecture" because I got bored, and from what I can tell it's literally just a bunch of split-tunnel VPNs in a trenchcoat...
The biggest difference vs "traditional VPNs" is that it can seamlessly do graph connectivity to the underlying physical infrastructure, rather than hub-and-spoke, so it's less vulnerable to single points of failure if set up correctly. (And many implementations also appear to have much more fine-grained segmentation and access control than 'traditional' L3 VPNs, but you could in theory achieve that "the old fashioned way" just fine with some effort, assuming you're not using a dumb-as-rocks VPN "appliance"...)
In other words, the abstract architecture is something Genuinely Neat from a technical standpoint, but the concept is just absolutely slathered in the C-suite's favorite Buzzword Bingo and marketing wanks trying to sell them Zero Effort Magic Beans...
