Zero Trust must be decentralized in cloud environments: trust decisions occur directly at identities, workloads, and data streams, no longer at central boundaries.