@scottalanmiller Thanks for the pushback, Scott, all fair points!

The article ended up blending a few different concepts: remote/published app delivery, application virtualization, full virtual desktops (VDI), and even the underlying server virtualization and containerization layers.

What we actually described mostly fits remote app delivery (X11, Windows RDS/RemoteApp, Citrix/AVD): the app runs on a server and only the UI is sent to the client.

That’s different from application virtualization (MSIX app attach, ThinApp), where the app runs on the endpoint inside an isolated package with little or no traditional install. We’ll add a separate diagram to make that clear.

We’ll rework the article to separate these models properly, add examples, and fix the terminology.

Really appreciate the correction!

Security within a VM (AV, MDM, OS/App updates, MFA, ZT, etc.), that accesses company data, doesn't matter if the host is secured.

No joke, I've seen countless times people wanting exceptions due to being a VM.

@Oksana Nutanix can't be trusted and can't be considered business class in any sense. They are deceptive and having any contact with them would constitute a risk in any environment.

I will stick to black and white printing to save costs. If a color printer is absolutely necessary, we can make it available for limited use..