AATP and Security Boundaries (Red Forest)

it's my current understanding that AATP integration exists with Secure Boundary Forest's (Red Forest) and i have found a new article making mention of ATP within Red Forest. (https://techcommunity.microsoft.com/t5/Enterprise-Mobility-Security/Best-Practices-for-Securing-Advanced-Threat-Analytics/bc-p/624091#M2588)

I am curious as to the Microsoft Security Best and Current Practice recommendations on ESAE and Red Forest- Should these RF implementation still only reside on physical hardware?

with this mention of AATP and security boundaries is Microsoft looking at a more Azure integrated Bastion (Red) Forest implementation?

Is AATP looking to play/extend or in future take the role of SCOM within a Red Forest ?

with AATP supporting Red Forest, would a Red Forest built out in Azure be Microsoft Supported, granted it addressed all the associated risks?