so, for example, an entirely internal zero trust network across all locations, should be .lan and not .internal?

.lan is so "back to office"