VPN often accepts too much risk by connecting outside devices to corporate network | Island can route internal apps through corporate networks while keeping everything else out