I love this post because it captures the challenge of assumptions in security so well. I have seen security folks make this argument so smugly when someone says they use a VPN or something similar, and it’s a good reminder to be mindful of our assumptions and biases.