The control plane decides how and where access is granted.
Identity is the common denominator across users, devices, and apps.
Ensuring the identity is verified gives confidence in all access decisions.