Oh, definitely agree. But I'm talking about "internal" tools that aren't actually internal, but are exposed on the public internet. At least if they're behind a VPN there's a hurdle to jump before you get to those tools.