what does belong on the internet in a post-mythos world?

one argument: only services which need to be available to unauthenticated endpoints should be default reachable.

all other services should be default unreachable (no data plane until authorized ...then use internet and other networks to establish the connections).

yes, that is not always easy. it is much more possible than it used to be.

and arguably we now need to commit to the tradeoffs of default unreachable services.