In my world, osquery exists outside zero trust because it's data is used to vet device state.