Excellent post showing the difficulties of zero trust in real life and the value of conditional access audience reporting to troubleshoot it.