Zero trust networking has been trendy for a little while now. I would summarize this as viewing the network as untrustworthy and instead relying on authenticating devices and users, and then creating secure point-to-point channels between trusted devices. One side effect of this architecture is that VPNs are less useful, since the network is already untrusted. Thus, companies that adopt a zero trust approach often allow you to access most, if not all, corporate resources remotely without a VPN.
Given the evolving security threat landscape, is there going to be a shift away from zero trust architectures towards something else (e.g. requiring more use of VPNs)?
This is admittedly subjective, given that not every organization uses zero trust networking. In making my judgment, I'll consider evidence such as accounts of companies requiring VPNs where they had previously relaxed it, or articles arguing why zero trust is insufficient, harmful, etc. Feel free to provide evidence that might sway my opinion.