If your services are internet accessible and secure, what is the distinction between your trusted internal network and the internet?

The answer is usually that legacy apps, SMB, Voip, and printing require trust derived from the network.