cally new architecture naturally comes questions around security. The <a href=/v1.17/blog/2022/ambient-security/>ambient security blog</a> does a deep dive, but we’ll summarize here.</p><p>Sidecars co-locate with the workloads they serve and as a result, a vulnerability in one compromises the other.
In the ambient mesh model, even if an application is compromised, the ztunnels and waypoint proxies can still enforce strict security policy on the compromised application’s traffic.
Furthermore, given that 