Thank you for your question. We are strictly following a Zero Trust concept (https://learn.microsoft.com/en-us/azure/security/fundamentals/zero-trust#guiding-principles-of-zero-trust). There are many ways to secure these concepts with the help of clouds and make on-premises environments even more secure. There are many customers using Azure Arc to bring Microsoft Defender and Microsoft Sentinel capabilities to their on-premises, edge, and multicloud environments exactly for this scenario.