Sandstorm comes to my mind when I think about zero trust, basically, Sandstorm allows any public servants in Taiwan to self service and install any open source software within the public service, but treating that particular software, it could be WordPress, it could be a markdown editor like HackMD, and so on.