tomizations adds a lot of variability to a shared resource which leads to unfair cost attribution at best and total proxy compromise at worst.</p><h2 id=sidecars-are-still-a-first-class-supported-deployment>Sidecars are still a first-class supported deployment</h2><p>We understand that some folks are comfortable with the sidecar model and their known security boundaries and wish to stay on that model. With Istio, sidecars are a first-class citizen to the mesh and platform owners have the choice to continue 