btw, if you want I can explain securing I briefly mentioned it here
using zerotrust, maybe another good content piece for you