i>Separation of application from data plane</li><li>Components of the secure overlay layer resemble that of a CNI</li><li>Simplicity of operations is better for security</li><li>Avoiding multi-tenant L7 proxies</li><li>Sidecars are still a first-class supported deployment</li></ul><h2 id=separation-of-application-and-data-plane>Separation of application and data plane</h2><p>Although the primary goal of ambient mesh is simplifying operations of the service mesh, it does serve to improve security as well. Co