Seems like a relevant post to the community here. I like how the author goes into a list of alternatives, with reasoning.
Cross-posted from:
https://feddit.nl/post/29675306
I am not the author.
I found this blog to have both a short summary of the reasons as well as a pretty complete overview of the options for protecting against this specific threat model.
I can just send this to people and they'll understand the why and the how.
Wonderful use case. MSF is an organization that deserves to have IT get out of the way and enable the business to do their work.
Applying these patterns as described in the presentation is a great way to ensure stability and consistency of IT in the field, so the doctors can just do the work!