Strong access does not fix weak servers

Strong access reduces entry risk but server hygiene still matters when services, updates, privileges and certificates drift behind the door.